last executing test programs: 1m0.005006772s ago: executing program 32 (id=190): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x7, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 58.492578397s ago: executing program 5 (id=191): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000800)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000840)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000880)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000900)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000980), 0x651, 0x0) recvmmsg(r1, &(0x7f00000009c0), 0x4000087, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00') preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000080)=""/175, 0xaf}, {&(0x7f0000000ac0)=""/4096, 0x1000}], 0x2, 0x5, 0x6) 57.312700517s ago: executing program 5 (id=200): close(0xffffffffffffffff) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000001000/0x2000)=nil, 0x2000, &(0x7f0000000700)='\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080), 0x1, 0x5be, &(0x7f00000000c0)="$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") openat2$dir(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x84000, 0x0, 0x8}, 0x18) r0 = fsopen(&(0x7f0000000740)='cgroup2\x00', 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$erofs(&(0x7f0000000780), &(0x7f00000007c0)='./bus\x00', 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="61636c2c757365725f78617474722c6e6f61636c2c63616368655f73747261746567793d64697361626c65642c6e6f757365725f78617474722c6e6f61636c2c00d4a87b439fa421753f060fe37a330d2dfca47c4e52e78d71fc65b972e2bb306bb4a29b1fe3019842462c5fee84a2e6eb90d57b8725e3a2eff0b0b471dac5c01bee53cd8d"], 0xfe, 0x183, &(0x7f0000000d00)="$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") listxattr(&(0x7f0000000cc0)='./file1\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x2) syz_clone(0x840c0200, 0x0, 0x0, 0x0, 0x0, 0x0) 57.060800913s ago: executing program 33 (id=199): sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x404}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x2, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x4000, 0x29, 0xd, 0x29, 0x0, @local, @loopback}}}}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00'], 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x8d0) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000c80)='./file1\x00', 0x101042, 0x15) pwrite64(r6, &(0x7f0000000cc0)='D', 0x1, 0x10c6a) r7 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./file1\x00', 0x101042, 0x15) writev(r7, &(0x7f0000000d40)=[{&(0x7f0000000d80)="11", 0x1}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 57.033810825s ago: executing program 5 (id=203): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0xe7) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/ipv6/conf/syz_tun/forwarding\x00', 0x2, 0xe0) write$cgroup_int(r0, 0x0, 0x0) 56.705666629s ago: executing program 3 (id=208): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000001, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8004, 0x6}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x310, 0x278, 0xb0, 0x148, 0x1e0, 0x278, 0x1e0, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x20008080, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000100)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x100, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private2={0xfc, 0x2, '\x00', 0x6}, 0x4f, r3}) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000643000/0x4000)=nil, 0x4000, 0xd) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = open(0x0, 0x0, 0x0) flock(r4, 0x2) open(&(0x7f0000000000)='./file0\x00', 0x148502, 0x16) 56.563381744s ago: executing program 34 (id=208): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000001, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8004, 0x6}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x310, 0x278, 0xb0, 0x148, 0x1e0, 0x278, 0x1e0, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x20008080, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000100)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x100, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private2={0xfc, 0x2, '\x00', 0x6}, 0x4f, r3}) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000643000/0x4000)=nil, 0x4000, 0xd) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = open(0x0, 0x0, 0x0) flock(r4, 0x2) open(&(0x7f0000000000)='./file0\x00', 0x148502, 0x16) 56.446658516s ago: executing program 5 (id=210): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2002, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbbbbbbbbbbba079ecf030b86dd6000000000483a0020010000000000000000000000000000ff0200000000000000000000000000010104907a7f00000060e1f588000700ffff020000000000000000000000000001ff020000000000000068c1d975a307c686000f0065000000be0000000000000001a102e9493a5d5b"], 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000880)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) io_setup(0x800, &(0x7f00000004c0)=0x0) r4 = eventfd(0x0) io_submit(r3, 0x1, &(0x7f0000000500)=[&(0x7f0000000780)={0x0, 0x0, 0x8, 0x0, 0x0, r4, 0x0, 0x4f}]) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x1400c, &(0x7f0000000180)={[{@debug}, {@data_journal}, {@norecovery}]}, 0x3, 0x498, &(0x7f0000000b80)="$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") chdir(&(0x7f0000001040)='./file0\x00') r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000001080)='.\x00', 0x0, 0xe9) getdents(r5, &(0x7f00000010c0)=""/43, 0x2b) getdents(r5, 0xfffffffffffffffd, 0xbb) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='mnt\x00', 0x4, &(0x7f00000000c0), 0x0, 0x236, &(0x7f0000000540)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x80) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x10008, &(0x7f0000000400)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x4a7, &(0x7f0000001100)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f00000015c0)='./file1\x00', 0x42, 0x1ff) r7 = open(&(0x7f0000001600)='./bus\x00', 0x4427e, 0x9a) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x1400, 0x0, 0x1) r8 = openat(0xffffffffffffff9c, &(0x7f0000001640)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r8, 0x8004587d, &(0x7f0000001680)={@id={0x2, 0x0, @d}}) sendfile(r6, r7, 0x0, 0x3) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) chdir(&(0x7f0000000840)='mnt/encrypted_dir\x00') syz_mount_image$fuse(0x0, &(0x7f0000000a80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x846048, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x6, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000e50000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e3341858500000073000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 56.028477138s ago: executing program 35 (id=210): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2002, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbbbbbbbbbbba079ecf030b86dd6000000000483a0020010000000000000000000000000000ff0200000000000000000000000000010104907a7f00000060e1f588000700ffff020000000000000000000000000001ff020000000000000068c1d975a307c686000f0065000000be0000000000000001a102e9493a5d5b"], 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000880)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) io_setup(0x800, &(0x7f00000004c0)=0x0) r4 = eventfd(0x0) io_submit(r3, 0x1, &(0x7f0000000500)=[&(0x7f0000000780)={0x0, 0x0, 0x8, 0x0, 0x0, r4, 0x0, 0x4f}]) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x1400c, &(0x7f0000000180)={[{@debug}, {@data_journal}, {@norecovery}]}, 0x3, 0x498, &(0x7f0000000b80)="$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") chdir(&(0x7f0000001040)='./file0\x00') r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000001080)='.\x00', 0x0, 0xe9) getdents(r5, &(0x7f00000010c0)=""/43, 0x2b) getdents(r5, 0xfffffffffffffffd, 0xbb) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='mnt\x00', 0x4, &(0x7f00000000c0), 0x0, 0x236, &(0x7f0000000540)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x80) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x10008, &(0x7f0000000400)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x4a7, &(0x7f0000001100)="$eJzs3E1sFFUcAPD/7LallY9WRBQEraCR+NHSgsrBAxpNPGhiogc81rYgslBDawKk0WIMHg2Jd+PRxLMHEw9ejHowJl418WhIiPYCeKqZnRm6LbulW9qudH+/ZHffm4++9+a9t/tmXmcCaFv96VsSsSUifo+I3iy6cIP+7OP67PTojdnp0STm5t78O6lud212erTYtNhvcx45UIoofZLE0eTWdCfPXzg1UqmMn83jg1On3x+cPH/hmZOnR06Mnxg/M3zkyOFDQ88/N/zsqpQzLde13R9O7Nn16tuXXx89dvmdn75Os7Vzb7a+thy3daNOgeroT4/aP3NVi9c93kTe7wZba8JJRwszQlPKEZFWV2e1//dGOeYrrzde+bilmQPWVPrbtKnx6pk5YANLotU5AFqj+KFPz3+L1zoNPf4Xrr4Y0ZWHr89Oj16fnc6jHVHKAt+sZfr9EXFs5t8v0lc0ex0CAGAFOtO3p+uN/0qxs/qZzXVsy+dQ+iLi3ojYHhH3RcSOiLg/orrtAxHxYLbzXO8y0+9fFL91/FO6UjfPqyQd/70wP/arvvJ0i4++ch7bWi1/Z3L8ZGX8YH5MDkTnpjQ+tEQa37/822eN1tWO/9JXmn4xFswzcKVj0QW6sZGpkdU6CFcvRuzuqC1/MbeV3JwJSJfsiojdzf3pbUXg5JNf7Wm00e3Lv4RVmGea+zLiiaz+Z2JB/c/P8SVLz08Odkdl/OBg0Spu9fOvl95olP4dlX8VXN33UBaYb/+LtqhpaJXK+NnJ5tO49MenDc9pVtr+u5K3qn3yl3ezZedGpqbODkV0Ja9V48U5XXX58Py+50ametJ4sX3a/g/sr9//t+f7pPWfHqW0Ee+NiIcj4pE8749GxL6I2L9E+X986bH3lih/Ekm0rv4vRozV/f672f77ktr5+hUEyqd++LbRjPny6v9wzFS/azPV77/bWG4G7/DwAQAAwF2hFBFbIikNZOH+LVEqDQxk/8O/I+4pVSYmp546PvHBmbHsHoG+6CwVV7p6a66HDiUz+V/M4sP5teJi/aH8uvHn5Z5qfGB0ojLW4rJDu9u8sP9H0f9Tf5VbnTtgzblfC9rX4v5falE+gPW3nN9/5wKwMS3s/93pW0+r8gKsL+f/0L7q9f+PFsWN/2FjWtj/v4uIP+s8sg7YiIz/oX3p/9C+9H9oS83czh9HG63qjohmHgtQ3Cyw8qcKdC/7Dv92CRRPvFjLtHriwqmufEmUWlTScpONbUME0h6zvonOP0MFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgbvZfAAAA//9Mbt54") r6 = openat(0xffffffffffffff9c, &(0x7f00000015c0)='./file1\x00', 0x42, 0x1ff) r7 = open(&(0x7f0000001600)='./bus\x00', 0x4427e, 0x9a) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x1400, 0x0, 0x1) r8 = openat(0xffffffffffffff9c, &(0x7f0000001640)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r8, 0x8004587d, &(0x7f0000001680)={@id={0x2, 0x0, @d}}) sendfile(r6, r7, 0x0, 0x3) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) chdir(&(0x7f0000000840)='mnt/encrypted_dir\x00') syz_mount_image$fuse(0x0, &(0x7f0000000a80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x846048, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x6, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000e50000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e3341858500000073000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 51.1151148s ago: executing program 36 (id=237): setrlimit(0x2, &(0x7f00000000c0)={0xe, 0xffffffffffffffff}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b000000080000000c0000004bffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0xd, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb7030000e5ffffffb704000000000000850000000300000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r1, 0x0, 0xe, 0x0, &(0x7f00000009c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = gettid() timer_create(0x1, &(0x7f0000000000)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) capset(&(0x7f00000001c0)={0x20071026}, &(0x7f0000000200)) capset(&(0x7f0000000240)={0x20080522}, &(0x7f0000000280)={0x9, 0x101, 0x5, 0xa, 0xe025, 0x7}) sendmmsg$unix(r4, &(0x7f00000001c0), 0x2d, 0x20040040) close(0x3) prlimit64(r2, 0xa, 0x0, &(0x7f0000000080)) process_vm_readv(r2, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/48, 0x30}, {&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/152, 0x98}, {&(0x7f00000004c0)=""/119, 0x77}, {&(0x7f0000000540)=""/2, 0x2}], 0x5, &(0x7f0000000700)=[{&(0x7f0000000600)=""/34, 0x22}, {&(0x7f0000000640)=""/160, 0xa0}], 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) 36.278967755s ago: executing program 37 (id=307): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x8082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'nr0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r1) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="130f000000000000f6ff06"], 0x18}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x400) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(r4, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r5, &(0x7f00000002c0), 0x4000087, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x0, &(0x7f0000000340)}) llistxattr(0x0, 0x0, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000040000001e000000000085000000bb00000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x300, 0x18c, 0x203, 0x0, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000007c0)={'syz_tun\x00', 0x0}) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001880)=""/84, 0x54}], 0x1) 34.090470488s ago: executing program 9 (id=314): socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = getpid() ptrace$getregs(0x2, r0, 0xe, &(0x7f00000006c0)=""/215) sched_setscheduler(r0, 0x2, &(0x7f00000002c0)=0x7) prlimit64(r0, 0xe, &(0x7f0000000000)={0x3, 0x8b}, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000140)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r3, &(0x7f00000002c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x8000, 0xfffffffc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000280)={0x6, &(0x7f00000000c0)=[{0x7, 0xa6, 0x43, 0x7fff}, {0xf001, 0x4, 0x9, 0x6}, {0x1, 0x3, 0xeb, 0x101}, {0x80, 0x2, 0x6, 0xd}, {0x7, 0x80, 0x2}, {0x974, 0x6, 0xff, 0x8e6c}]}) openat(0xffffffffffffff9c, &(0x7f0000000440)='./dev/kmsg\x00', 0x0, 0x24) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48880}, 0x4000000) setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000240), 0x4) r5 = syz_open_procfs(0x0, &(0x7f00000004c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000500)='.\x00', &(0x7f0000000540), 0x52840, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESDEC=r1, @ANYBLOB="2c0025496c49098c65d0ea6f23108c0f44063eb5d0f44451f44f70148e8e5b9392043b471562ea6b9baf0b566552097f4aeb6bf90a2ab2bd43b4e271e7400cbdf94b270ee2567d9022881c25b43c5ae74de544ada705a0624dbd2dd560ac4fd7d2be798e379cc00ed4e7c35c740a1a311a8cbf"]) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r6, &(0x7f0000000600)={0xa, 0x8000002, 0x0, @mcast2}, 0x1b) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCSPGRP(r7, 0x8902, &(0x7f0000000080)=r2) 33.933891135s ago: executing program 38 (id=314): socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = getpid() ptrace$getregs(0x2, r0, 0xe, &(0x7f00000006c0)=""/215) sched_setscheduler(r0, 0x2, &(0x7f00000002c0)=0x7) prlimit64(r0, 0xe, &(0x7f0000000000)={0x3, 0x8b}, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000140)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r3, &(0x7f00000002c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x8000, 0xfffffffc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000280)={0x6, &(0x7f00000000c0)=[{0x7, 0xa6, 0x43, 0x7fff}, {0xf001, 0x4, 0x9, 0x6}, {0x1, 0x3, 0xeb, 0x101}, {0x80, 0x2, 0x6, 0xd}, {0x7, 0x80, 0x2}, {0x974, 0x6, 0xff, 0x8e6c}]}) openat(0xffffffffffffff9c, &(0x7f0000000440)='./dev/kmsg\x00', 0x0, 0x24) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48880}, 0x4000000) setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000240), 0x4) r5 = syz_open_procfs(0x0, &(0x7f00000004c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000500)='.\x00', &(0x7f0000000540), 0x52840, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESDEC=r1, @ANYBLOB="2c0025496c49098c65d0ea6f23108c0f44063eb5d0f44451f44f70148e8e5b9392043b471562ea6b9baf0b566552097f4aeb6bf90a2ab2bd43b4e271e7400cbdf94b270ee2567d9022881c25b43c5ae74de544ada705a0624dbd2dd560ac4fd7d2be798e379cc00ed4e7c35c740a1a311a8cbf"]) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r6, &(0x7f0000000600)={0xa, 0x8000002, 0x0, @mcast2}, 0x1b) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCSPGRP(r7, 0x8902, &(0x7f0000000080)=r2) 31.226944761s ago: executing program 1 (id=330): close(0xffffffffffffffff) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) syz_clone(0x840c0200, 0x0, 0x0, 0x0, 0x0, 0x0) 31.130134871s ago: executing program 1 (id=332): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000005c0)=0x13) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000000)=@req={0x800000, 0x1, 0x1000, 0x800}, 0x10) connect$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x2}, 0x4}}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/dynamic_debug/control\x00', 0x2, 0x0) lseek(r3, 0x500, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x8000, 0x7, 0x10, 0x3, {{0x22, 0x4, 0x3, 0xb, 0x88, 0x66, 0x0, 0x1, 0x29, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x31}, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x27, 0x54, [@loopback, @local, @remote, @broadcast, @broadcast, @broadcast, @private=0xa010100, @remote, @local]}, @lsrr={0x83, 0x17, 0xff, [@local, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1b}, @multicast2]}, @ra={0x94, 0x4}, @end, @generic={0x7, 0xd, "cf8ff9008b87e7cf48d885"}, @rr={0x7, 0x1f, 0x39, [@loopback, @empty, @rand_addr=0x64010100, @loopback, @private=0xa010102, @private=0xa010101, @private=0xa010101]}]}}}}}) sendto$packet(r2, 0x0, 0x0, 0x8080, &(0x7f0000000040)={0x11, 0x18, r4, 0x1, 0x7, 0x6, @broadcast}, 0x14) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000600)={0xffbfff40, 0x400040a, 0xdf83e44, 0x8000004, 0x7, "007ffc0000000000000000e8ffffffffffffff", 0x7, 0x40403}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000640)=0xd) 30.877877717s ago: executing program 1 (id=335): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='$'], 0x28}}], 0x1, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x10000, &(0x7f0000000600)={0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00', 0x23}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x1000, 0x2, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x1000, 0x1, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x205c85, 0x2, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x4003ffff, 0x238}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x400, 0x1, 0xffffffff, 0x0, r5}}], 0x1, 0x0, 0x0) 29.409793137s ago: executing program 1 (id=340): unshare(0x60000600) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000340)={0x0, 0x0, 0x8010, 0x480}) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) fallocate(0xffffffffffffffff, 0x20, 0xd63, 0x4) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000877000/0x4000)=nil) syz_mount_image$fuse(0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0) r1 = dup(0xffffffffffffffff) write$FUSE_BMAP(r1, 0x0, 0x0) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0}, &(0x7f0000000500)=0x5) setuid(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x0, 0x7c7, 0x29, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x86, 0x4, 0x0, @loopback, @local}}}}) write$FUSE_DIRENTPLUS(r1, 0x0, 0x138) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x204004, &(0x7f0000000380)) timer_settime(r0, 0x1, &(0x7f00000003c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) (async) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000400)={0xaa, 0x428}) (async) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000440)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa04, &(0x7f0000000480)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r7) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x77) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c000000100037040100"/20, @ANYRES32=r8, @ANYBLOB="83000500012c00f92a7f00000000100e27010069713665727370616e00000099fe028004"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40850) (async) sendmmsg$inet(r6, &(0x7f0000000240)=[{{&(0x7f0000000280)={0x2, 0x4e1c, @multicast1=0xe0000306}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) (async) timer_create(0x6, &(0x7f0000000000)={0x0, 0xd, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000000080)) 28.942601954s ago: executing program 7 (id=343): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) mkdir(&(0x7f0000000200)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='dir0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000002700), &(0x7f0000002740)='./file0\x00', 0x10, &(0x7f0000002780)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b722c64329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a41856102000000000000006357ee95fffb99cde923a6c2e7eee552c60119e2822287367b0526cec2098d6ef88304699e83b0d070ad82774d8cc230dc844fa4ed26ec244085d833e4e2309d01aea46150e5d791371358a8ecd02c1e8795d500af4694cc800962a672fd461d94ad695620623ccf81ae84a48df7d0ffafbb72f694c5e1bb70d4b394fd631e5801e7"], 0x3, 0x2b5, &(0x7f0000002940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000002c00)='./file1\x00', 0x101042, 0x15) ftruncate(r0, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='dir0/per_cpu/cpu0/trace\x00', 0x0, 0x0) read(r1, &(0x7f0000000600)=""/4, 0x1) syz_fuse_handle_req(r1, &(0x7f0000000640)="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", 0x2000, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x2000800, &(0x7f0000000200)=ANY=[], 0x7, 0x249, &(0x7f0000000280)="$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") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0xa880, 0x85) getdents64(r2, 0x0, 0x4f) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000711215000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x24}, 0x94) 28.88551629s ago: executing program 7 (id=344): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000340)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r1}, 0x4) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvfrom(r2, 0x0, 0x0, 0x40000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x16, 0x3, &(0x7f0000000980)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x92}}, &(0x7f00000009c0)='syzkaller\x00'}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000a80)='ext4\x00', &(0x7f0000000ac0)='./file0\x00', 0x8, &(0x7f0000000b00), 0x5, 0x504, &(0x7f0000000b40)="$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") chown(&(0x7f0000001080)='./file0\x00', 0xee01, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'pimreg1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000880)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000001980)=@ipv6_delroute={0x1164, 0x19, 0x8, 0x70bd25, 0x25dfdbfe, {0xa, 0x20, 0x10, 0x0, 0xfd, 0x1, 0x0, 0x7, 0x2000}, [@RTA_MULTIPATH={0xc, 0x9, {0x4, 0x15, 0x9, r4}}, @RTA_METRICS={0x1004, 0x8, 0x0, 0x1, "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"}, @RTA_IIF={0x8, 0x3, r5}, @RTA_MARK={0x8, 0x10, 0xa0}, @RTA_METRICS={0x5e, 0x8, 0x0, 0x1, "be18b688c46d579171f6f96fab0bcbdca25783e40d505b3c6c350c9cfe2d31acc77994d08e5568f05fb95588a9a290cbc9a2d93b8bed97a4ff446f47838026e2899a3ec02b0a7f5f9fb2a425f8389d49c2a8367479e92a77869c"}, @RTA_GATEWAY={0x14, 0x5, @remote}, @RTA_METRICS={0xb4, 0x8, 0x0, 0x1, "688ff27182e1b7e9fc99e103d9e4d91671232a02db9fc184ae3c711ee115e38dca0d0165bddc7141d2f69ebad0d8363c4b28ecd8fbae5f6d980082667279c069a7c91f05b4a22eb18935b713b31c7a0c7b7f85b5837bc91c4322d20b36640d9f89b7a304000000000000003fbff73aabbc08880f2ff28ee45cc3330ef02301006d7723cebb5a6fffdd8756cd7d1d36742c0fc0ffb30de9fbf8f7d65c73c21e38b9781f30270db9e9ba24ea11d07a5b2d"}]}, 0x1164}, 0x1, 0x0, 0x0, 0x871ac4b30833d133}, 0x0) r6 = memfd_create(&(0x7f0000000540)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pipe2(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r9, 0x29, 0x3c, 0x0, 0x0) splice(r7, 0x0, r6, &(0x7f0000000640)=0x8000000000008008, 0x2, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x11, &(0x7f0000000140)=ANY=[@ANYRESOCT=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r7) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl1\x00', r4, 0x8000, 0x7808, 0xb, 0x6, {{0x7, 0x4, 0x0, 0x19, 0x1c, 0x68, 0x0, 0x3, 0x2f, 0x0, @remote, @multicast2, {[@ra={0x94, 0x4, 0x1}, @noop]}}}}}) r13 = socket$can_bcm(0x1d, 0x2, 0x2) futex_waitv(&(0x7f0000000500)=[{0x0, &(0x7f0000000a00), 0x82}], 0x1, 0x0, &(0x7f0000000a40), 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) connect$can_bcm(r13, &(0x7f0000000740)={0x1d, r14}, 0x10) sendmsg$ETHTOOL_MSG_RINGS_GET(r8, &(0x7f0000000800)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0c0126bd70005e0800000f0000001c00018008004100", @ANYRES32=r12, @ANYBLOB="080003000100000008000100", @ANYRES32=r14, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r10, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000480)="b9ffae0100825b9354116380d3a0", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r15 = socket$inet6(0xa, 0x3, 0x8) sendmmsg(r15, &(0x7f0000000200)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x500, 0x80000, @dev={0xfe, 0x80, '\x00', 0xf}, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040) 28.78667923s ago: executing program 7 (id=346): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x8082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'nr0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r1) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="130f000000000000f6ff06"], 0x18}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x400) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(r4, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r5, &(0x7f00000002c0), 0x4000087, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x0, &(0x7f0000000340)}) llistxattr(0x0, 0x0, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000040000001e000000000085000000bb00000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x300, 0x18c, 0x203, 0x0, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000007c0)={'syz_tun\x00', 0x0}) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 28.78646058s ago: executing program 1 (id=347): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10452, &(0x7f0000000740)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c6e6f6e756d7461696c3d302c696f636861727365743d63703837342c757466383d312c756e695f786c6174653d312c757466383d312c6e6f6e756d7461696c3dd577cdd479f9fc5ff1863c12285dc7c9302c756e695f786c6174653d312c73686f72746e616d653d6c6f7765722c6e66733de7537e1cbd4a00a86520371668c0b73d6e6f7374616c655f726f2c696f636861727365743d63703935302c756e695f786c6174653d312c757466383d312c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c696f636880"], 0x3, 0x2ae, &(0x7f00000009c0)="$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") mkdir(&(0x7f0000000100)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x989046, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$uac2(r2, 0x0, &(0x7f00000002c0)={0x44, &(0x7f0000000340)={0x20, 0xe, 0x4, "f010420b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000c80)={0x40, 0x6, 0x4, "84c3a7bd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000d40)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000440)=@name={0x1e, 0x2, 0x3, {{0x42}, 0x40004}}, 0x10) bind$tipc(r3, &(0x7f0000000840)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r3, &(0x7f0000000880)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x42}, 0x10) bind$tipc(r1, 0x0, 0x0) close(r1) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000380)={r5, r5, 0x9, 0x0, 0x0, 0x1, 0x40, 0xead, 0x1cb, 0x2, 0x3, 0x101, 'syz0\x00'}) mount$bpf(0x200000000000, &(0x7f0000000180)='.\x00', 0x0, 0x8b7840, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='\x00', 0x89901) move_mount(r7, &(0x7f0000000200)='.\x00', r7, &(0x7f0000000240)='./file0\x00', 0x120) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000480)={'syzkaller0\x00', 0xca02}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000004c0)=0x3, 0xac5) 28.78600911s ago: executing program 4 (id=348): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000001, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8004, 0x6}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x310, 0x278, 0xb0, 0x148, 0x1e0, 0x278, 0x1e0, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x20008080, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000100)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x100, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'}) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000643000/0x4000)=nil, 0x4000, 0xd) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = open(0x0, 0x0, 0x0) flock(r3, 0x2) open(&(0x7f0000000000)='./file0\x00', 0x148502, 0x16) 27.552870316s ago: executing program 7 (id=351): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x8082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'nr0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r1) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="130f000000000000f6ff06"], 0x18}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x400) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(r4, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r5, &(0x7f00000002c0), 0x4000087, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x0, &(0x7f0000000340)}) llistxattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000040000001e000000000085000000bb00000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 26.226990321s ago: executing program 4 (id=355): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{&(0x7f0000000540)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, 0x0, 0x28}}], 0x1, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x10000, &(0x7f0000000600)={0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00', 0x23}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x1000, 0x2, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x1000, 0x1, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x205c85, 0x2, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x4003ffff, 0x238}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x400, 0x1, 0xffffffff, 0x0, r5}}], 0x1, 0x0, 0x0) 26.219543292s ago: executing program 7 (id=356): setresuid(0x0, 0xee00, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000280), 0x651, 0x0) syz_open_procfs(0x0, &(0x7f00000004c0)='fd/3\x00') 25.351577841s ago: executing program 7 (id=360): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x4a, &(0x7f00000009c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x7, 0x0, 0x3}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000a40)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x18, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0xc2, 0xfffb, 0x0, 0xffd, {[@window={0x3, 0x3, 0xa5}]}}}}}}}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000000)={0x3, [0x0, 0x0, 0x0]}) write$binfmt_script(r0, &(0x7f0000000440), 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a300000000048000000030a01040000000000000000010000000900010073797a30000000000900030073797a31000000001400048008000140000000040800024000000064080007006e6174004c000000060a01040000000000000008010000000900010073797a30000000000900020073797a3100000000200004801c000180090001006d617371000000000c000280080001400000004214000000110001"], 0xdc}, 0x1, 0x0, 0x0, 0x4}, 0x8040) connect$inet6(r2, &(0x7f0000000e80)={0xa, 0x4e07, 0x3, @empty, 0x23}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000ec0)=[{{&(0x7f0000000f00)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r4, &(0x7f0000000280)={0x2, 0x2383, @loopback}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0xfffffffe, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xe, 0x6, &(0x7f0000000b80)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r5}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @call={0x85, 0x0, 0x0, 0x34}, @exit], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000c00)={@map=r5, r6, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000c40)={r5, &(0x7f0000000c80), &(0x7f0000000cc0)=@tcp=r4}, 0x20) write(r4, &(0x7f0000000d00)='h', 0x100000) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_kvm_setup_syzos_vm$x86(r8, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r9, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_create_vm={0x12d, 0x18, 0x1}], 0x48}) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x4) 25.331185743s ago: executing program 4 (id=361): r0 = socket(0x10, 0x3, 0x9) connect$netlink(r0, &(0x7f0000000480)=@proc={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0x16, &(0x7f0000000580)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSETELEM={0x0, 0xc, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET_ID={0x0, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x0, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x0, 0x6, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_RULE_POSITION={0x0, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_EXPRESSIONS={0x0, 0x4, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, @limit={{}, @void}}]}, @NFTA_RULE_USERDATA={0x0, 0x7, 0x1, 0x0, "9f6032f73db57c2a841243b5c9477ce908e43d9e6d364650607ff08a051cf57fbc3db22f6bc6c5a43f5674e832c910d872be538185abfb5e714e73070d2e18104ac3385306b571df6ec51f56c8d5ce62bcf6c358336395d7e153508c0cdaf53766f1aec4e8125a32e2dbca907cca070f36542368f5ead40d19dd44f5be96a627d0e40ffb6e63998d2eb4d782cbd896edab69afcbb899478c9153945c6386f0706e0adba96d6bf1e5bd9caa75c23f415a45f8eec6a777a61ef17c01e9f413b3d71f1f4c996f0c5ddf"}, @NFTA_RULE_USERDATA={0x0, 0x7, 0x1, 0x0, "3695946a87879b11a444331539fe454736d8cc465b9ea88655703f1ca300b2e74daae08f3fe0a4aa978669e0a1dc59cfb166d31ad876c02e5ed51d3f854518bc060f86c9a434ea7acb169e7fa5cdbb6f5cc2fdb4837bd8edcc3ab30efa2b52d02d3e5da8041ad3ff888458774ea3e5882d0037d0db039dc0c2afa6315106f4fcf4a31893472f9bd72c688a58428a88e67c8303d0433a9d2b0c2e19a84dcd14a7a643c4e349e105b41e750dc3905bd2faaa9df2d07c3a90ef11fd8683c4f5e6cfdfd51ef2e0bc6819063cc47cbcbc1dc44a5e2a76b0d88d34a8741f46aaa1"}, @NFTA_RULE_ID={0x0, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0x0, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_HANDLE={0x0, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x0, 0x3, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_CHAIN_HANDLE={0x0, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_COUNTERS={0x0, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0x0, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0x0, 0x1, 0x1, 0x0, 0x4508}]}, @NFTA_CHAIN_COUNTERS={0x0, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0x0, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_COUNTER_BYTES={0x0, 0x1, 0x1, 0x0, 0x7}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x28}, 0x1, 0x0, 0x0, 0xe938a4af42647592}, 0x4000040) 25.272953079s ago: executing program 4 (id=362): unshare(0x22020400) clock_getres(0x2, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="0001000000000000000400000485000000360000003965f8ffffffffff85000000ba0000020000000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000001880)='system.posix_acl_default\x00', &(0x7f00000018c0)={{}, {0x1, 0x1}, [], {0x4, 0x1}, [], {0x10, 0x3}, {0x20, 0x2}}, 0x24, 0x1) r2 = syz_io_uring_setup(0x141c, &(0x7f0000000240)={0x0, 0x42ba, 0x80, 0x1, 0x139}, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_modify_offsets$generic(r3, r4, 0x68, 0xffffffff) r6 = eventfd2(0x81, 0x1) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0xc4fb, 0x100, 0x3, 0x37b, 0x0, r2}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0fb, 0x42, 0x0, 0x364, 0x0, r2}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd474, 0x80, 0x0, 0xf4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x48e5, 0x8, 0x1, 0x378, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88bd, 0x400, 0x2, 0x133, 0x0, r2}}], 0x4, &(0x7f00000017c0)={0x2e, 0x49, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, '\x00', {0x0, 0x41c, 0x0, &(0x7f00000007c0)=@buf_max_buf="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"}}, &(0x7f0000001840)) io_uring_register$IORING_REGISTER_EVENTFD(r7, 0x4, &(0x7f0000000380)=r6, 0x1) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x52, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x2, 0x917, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0xde}}}, 0x0) r8 = fsmount(r0, 0x0, 0x80) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), r8) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r8, 0x28, 0x6, &(0x7f0000000180), 0x10) 25.16657031s ago: executing program 4 (id=363): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) open(0x0, 0x66842, 0x0) inotify_init() mount$bind(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000000200)='./file0\x00', 0x9000, &(0x7f0000000240)={0x200005, 0xd, 0x87000}, 0x20) 25.1663036s ago: executing program 4 (id=364): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 24.842570643s ago: executing program 8 (id=366): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x8082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'nr0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r1) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="130f000000000000f6ff06"], 0x18}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x400) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(r4, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r5, &(0x7f00000002c0), 0x4000087, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x0, &(0x7f0000000340)}) llistxattr(0x0, 0x0, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x300, 0x18c, 0x203, 0x0, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 24.434744575s ago: executing program 6 (id=367): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x6, 0x9, &(0x7f0000000240)={{0xc, @multicast2, 0x4e21, 0x3, 'nq\x00', 0x28, 0x3a6, 0x3}, {@empty, 0xfffd, 0x2000, 0x8, 0x8, 0x2000050}}, 0x44) getsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f00000002c0)) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000800008500000086000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000200)={r3, r2}, 0xc) ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000300)) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000400)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000002040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0xfb}, 0x1c) r4 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r4, &(0x7f0000002180)={&(0x7f00000021c0)={0xa, 0xd, 0x7, @mcast2, 0x9}, 0x1c, &(0x7f0000002200)=[{&(0x7f0000002240)="671723d7c6013394717e3b6903ff3f503e825efa5390be209eeb9a44f302f1307c2127811e5e9f08", 0x28}], 0x1}, 0x20008b88) 23.735242826s ago: executing program 6 (id=368): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x7ff, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x8000002, 0x2004}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22008041, &(0x7f00000000c0)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x20) sendto$inet6(r1, &(0x7f0000000100)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@updpolicy={0x13c, 0x19, 0x1, 0x4070bd2d, 0x25dfdbff, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in=@remote, 0x4e20, 0xb, 0xf7ff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x1000}, {0x1, 0x6, 0x80}, 0xfffffffc}, [@tmpl={0x84, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x4}, 0x5, 0x3c}, 0x0, @in6=@empty, 0x3502, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7ffc}, {{@in6=@remote, 0x0, 0x3c}, 0x2, @in6=@loopback, 0xfffffffd, 0x4, 0x3, 0x0, 0x800, 0x800}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40015}, 0x20000010) 23.420171908s ago: executing program 1 (id=369): r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, 0x0) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f00000000c0)={0x4}) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000480)="788072136296febd0dc879f20bf0689f295d781c1953d9bf25c82517fd97bf71a624d9447472136ae9c312e7c7228e3edf53a158479eb47ade15c2e0c424258bcd12ab49c0f87afb3705487a5e9261340c80fd4fb9090ff56620c84280f1be86358a03fedc460a4d6400e74f55d9394fd63efbb645654ccf455de7078115938459dcf4608181125055805e5b81f49f34b53d0b82fbad330350b15453cb7668392a5298ee12475ba6cfaf39a1c982eee53cca588f", &(0x7f0000000540)=""/49, 0x4}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x10, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800"/18, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000007000095000000000000007617040007000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000bc0)='syzkaller\x00', 0x4, 0xd4, &(0x7f0000000c00)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, 0xfffffffffffffffc) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@newtaction={0x98, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x84, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x2, 0xf}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x9}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x30, 0x2, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) read$FUSE(0xffffffffffffffff, &(0x7f0000001b80)={0x2020}, 0x2020) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000001a00010027bd7000fbdbdf250a801000fe00ff0b0000000008001c00", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x2000c084}, 0x24044010) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) ioctl$XFS_IOC_FSGEOMETRY(0xffffffffffffffff, 0x8100587e, &(0x7f0000001040)) fstat(r0, &(0x7f0000003c00)) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000d40)='./trace\x00', &(0x7f0000000d80)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000dc0)='./trace/set_event\x00', 0x2, 0x0) write(r3, &(0x7f0000000e00)='!', 0x1) lstat(&(0x7f0000003d40)='./file0\x00', &(0x7f0000003d80)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x20a02, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000340)={'\x00', 0x2}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000852010"], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80), &(0x7f0000000ac0)}, 0x94) ioctl$TUNSETDEBUG(r4, 0x400454c9, 0xffffffffffffffff) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000e40)={0x0, 0x0}, 0x6) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000e80)=r5, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000ec0)={r6, 0x20, &(0x7f0000000f00)={&(0x7f0000000f40)=""/243, 0xfffffffffffffdb4, 0x0, 0x0}}, 0x10) 23.377189422s ago: executing program 6 (id=370): syz_usb_connect$midi(0x3, 0xbb, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa9, 0x1, 0x1, 0x8, 0x10, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x7, 0x1, 0x3, 0x30, 0x40, [@ms_header={0x7, 0x24, 0x1, 0x1a8b, 0x7}], [{{0x9, 0x5, 0x80, 0x2, 0x20, 0x7, 0x3, 0x0, {0x8, 0x25, 0x1, 0x4, "78630504"}}}, {{0x9, 0x5, 0x9, 0x0, 0x610, 0x2, 0x8, 0x8, {0xc, 0x25, 0x1, 0x8, "d2f460f6b8d1e466"}}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0xdd, 0xf9, 0x8, {0x4}}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x5, 0xb0, 0x3, {0x13, 0x25, 0x1, 0xf, "6739702ad7546c459853f7578f07ce"}}}, {{0x9, 0x5, 0xe, 0xc, 0x10, 0x5, 0x0, 0x8, {0xc, 0x25, 0x1, 0x8, "accd56c8f82c8168"}}}, {{0x9, 0x5, 0x0, 0x3, 0x20, 0x9, 0x40, 0xe, {0xc, 0x25, 0x1, 0x8, "e730ecd9ce2f14cf"}}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x2, 0x3, 0x1, {0xe, 0x25, 0x1, 0xa, "842b3d08743b0c26ede0"}}}]}}}}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x9, 0x6, 0x0, 0xff, 0xff}, 0x18b, &(0x7f0000000240)={0x5, 0xf, 0x18b, 0x4, [@generic={0xd2, 0x10, 0x3, "060fe418eeeb20b3a376d948814992bef71fb357512f4f4654b37d90c852a756321ea22eab31c8c6e669c02eb68d27f19bf53a048a256569e529c6052bd69f320318a053ef86fda9e797da4b38c5e1573aa080001f3a0fbdac861408812c2a5a4ec3f9fd49e01285fb5eb6aa7d4d991e325fd32ab9fcbcc96b3852a50e54b6ca422e9d7cc064178ebb7252dc8a8eef1692024c961e2524fa92291175a04125bb682f106cc705dce90812bad27e269c506495d7bec6c4dd324af3f729300c0333db55be64746015187eb7b1f990556e"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x20, 0x1, 0xc, 0x9, 0xb}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x8, 0x7, 0x2}, @generic={0xa2, 0x10, 0x2, "33019e9ca73d42d52d7d7732d0c0f5a02b397703dfd7f3fda5e89a31c993544b27304357f4f5113c4af0b0b363fdda3107fd0e12eab4d6c73b129f2aada5f65c230efa68c74fc4b52d03723cdec2970c4b0d6210829fefac0d94e1f7d70cf42352997aaa8e5f2da9a59365c2c5c999ac152a6b445a716bab1783e77a0caa4c36aeeae4e905206264d23dbdaa1503960bd7e87cd297662500f8e3b80fec7b56"}]}, 0xa, [{0x3c, &(0x7f0000000400)=@string={0x3c, 0x3, "9df923a1a03b441c7222815b0a126286f41067c0a30a4feb34dc48dd6f62195e094545b603ea31453b563af5647e4f584e9a5856146e34151889"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x42c}}, {0x11, &(0x7f0000000480)=ANY=[@ANYBLOB="1103f2b917ed5546fb096e1d32d4b14c3e"]}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x813}}, {0x7, &(0x7f0000000500)=@string={0x7, 0x3, "d621b6f03c"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x40b}}, {0xbf, &(0x7f0000000580)=@string={0xbf, 0x3, "a5aefe9eb67db4eaa16e6ea625b5bda340e84b2f0acbd57b039343d63f3aecc481a20376113a90db23243e81e00ec39a81f579b35dbaffb9748fcf17a47a4b02a9e655d39946f15d5d92660de6948eaca341970f6064e510471d60a8a0e261cc51e5924c4bd33f968b8baf036c43e1f96c4b0d61e51c0e0de0758f76fdb315ba8937237b04252d43a8beea2ee6232142b3efa0c581f903f31fa928dd9be693e19bebebbd1c9fe91b56a16d813806885ffca5276f3beb5d060cb59f149a"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x443}}, {0x4c, &(0x7f0000000680)=@string={0x4c, 0x3, "48d4f7c88dd2ee0c3f6ee09da5ec3394580faab23ee2b0c9f22d8b72e4b33af89501f56800ce8895b982384724f53095d560cbe2d7a47811800afd0caea016dcafa488295b2d4d0f037c"}}, {0xf5, &(0x7f0000000700)=@string={0xf5, 0x3, "8fbb4609fd6fe551ad958ec4d0cafe784091169f189a34bb97dd18657866213825f0346f71b61173f2fb408e539ea8b4c224be2e02184316f23fecbb83511079c21e533291475d976d83973f3cf7fa95afa49c6987d8e43956c26322dd3dfc86a29465bdb7017b56cbae421349738547bbb3d6d1b385f81cdd094dec517e76620c0540ca363b4933a4e1a39bae5962f1daff13cd7a7615902241c89490518161aee5f04d82aba44ae3d168503ff3236669b159eb4eff7e6c84d7328d1eb1a0ddd852dedfceb10aa48672646fd8805dfc1f10af9688c4f3524166ec502d121ff7576ab782517212300e8acae9f9eb2e451cc9b1"}}]}) unshare(0x40000000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001140)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x50) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000cc0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10452, &(0x7f0000000d40)={[{@shortname_mixed}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@utf8}, {@uni_xlate}, {@utf8}, {@numtail}, {@uni_xlate}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@uni_xlate}, {@utf8}, {@shortname_mixed}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}]}, 0x3, 0x2a3, &(0x7f0000001400)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r0, 0xc040aed4, &(0x7f0000000000)={0x112000, 0x2}) 23.331211927s ago: executing program 8 (id=371): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{&(0x7f0000000540)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, 0x0, 0x28}}], 0x1, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x10000, &(0x7f0000000600)={0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00', 0x23}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x1000, 0x2, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x1000, 0x1, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x205c85, 0x2, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x4003ffff, 0x238}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x400, 0x1, 0xffffffff, 0x0, r5}}], 0x1, 0x0, 0x0) 22.468768775s ago: executing program 8 (id=372): rename(0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r0, 0x852ac000) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000800)=0x189d, 0x1a) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003140)=""/4096, 0x1000}, 0x8}], 0x1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x0, 0x8002, 0x4e20, 0x2, 0xa, 0xa0, 0x0, 0x1d}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfd, 0x32}, @in=@broadcast, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x0, 0x200000053f}, {0x4, 0x7fffffff7fffffff}, {0x3, 0x1}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}}, 0xf0}, 0x1, 0x0, 0x0, 0x10810}, 0x48080) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYBLOB="b13c376fdd66a7d639c02532bf04ce21f7d86f67914cd24c1a16c85d000e56c7368c5baa847b8d1390c871ca73979c130e2e8dba52cb6e29e7ef9ce8e7f092a32dd4dff5839727b3f591e388d041527960a1e20a1e133b12dfc18f1f732ea8614d5847cd54edc1c0aa5422ef3bb9508fdbebcc135de98954f1d9fbffbb190a49b16c1275d4830b8a85acf0b55c1e19533fb1ae4ca8f80bdefda060e3e6837a10fc794ecf34ec4b7a7c76402285c415d76a33d64d218596c8126c7b35076511e52e235fb9be2d0a381962e129748855c39c84436bd553b25d7f0ae7e35b54eebdb608625a42b589438a35d78997"], 0xff, 0x2c1, &(0x7f0000000380)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x0, &(0x7f0000000900), 0xfe, 0x259, &(0x7f0000000940)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000bc0)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000c00)={0xf, 0x0, 0xe, 0xd}) write$binfmt_script(r3, &(0x7f00000006c0), 0xffffffffffffff41) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001140)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newlink={0x54, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}, @IFLA_BR_STP_STATE={0x8}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_PRIORITY={0x6, 0x6, 0x6}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c824}, 0x0) ftruncate(r3, 0x4a8e) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FIOCLEX(r6, 0x5451) 21.902792783s ago: executing program 8 (id=373): socket(0x10, 0x803, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x60, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000007380)=0x3, 0x4) sendto(r2, &(0x7f00000073c0)="120000001200e7ef007b0000000000", 0xf, 0x0, 0x0, 0x0) r3 = dup(r1) syz_ublk_setup_queues(r3, r0, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000022, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) 21.849226959s ago: executing program 6 (id=374): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x0, 0x40881}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}]}}}]}, 0x3c}}, 0x4048050) syz_usb_connect(0x2, 0x5e, &(0x7f0000000040)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRES64=0x0], 0x0) 21.792157924s ago: executing program 8 (id=375): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, 0x0, 0x80) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x40}}}, &(0x7f0000000300)) r2 = socket$inet6(0xa, 0x3, 0x7) recvfrom$inet6(r2, 0x0, 0x0, 0x10000, &(0x7f0000000600)={0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00', 0x23}, 0x1c) 20.902771135s ago: executing program 8 (id=376): sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x404}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x2, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x4000, 0x29, 0xd, 0x29, 0x0, @local, @loopback}}}}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00'], 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x8d0) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1000040, &(0x7f0000000600)={[{@user_xattr}, {@sysvgroups}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5759}}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@mb_optimize_scan}, {@minixdf}]}, 0x1, 0x5a3, &(0x7f00000006c0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000c80)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 18.823383548s ago: executing program 6 (id=377): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x19, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000240)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) sched_setscheduler(r4, 0x1, &(0x7f0000000400)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000480)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000500), 0x651, 0x0) recvmmsg(r5, &(0x7f0000000540), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x200000f, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000004000000000001b0000d0a8cdd74e1bb4426600feff200000950000000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0x93, &(0x7f0000000680)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x4c) mkdirat(0xffffffffffffff9c, 0x0, 0x184) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x5) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r7 = openat$binfmt_register(0xffffff9c, &(0x7f0000000580), 0x1, 0x0) write$binfmt_register(r7, &(0x7f00000005c0)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x1, 0x3a, '/_\x7f\xf0R\xf6\xedI\xf3\xf4\x12I\xb1\xeb\x0f\xa9\x13r\xbaS$\x81<\x1b3a\xf7\xb2\x93\x8bw0\xa2m\xb7n3\x80K\x11n`\x7fo\xdd#\x8f3\xdb\xb1\x10$%\x92j\xbf\x11\xf7{\x06z\x83M^\xfb\xa8\x00O\xa7\r8\xc0c\xb6x\xd1\xcaO\xb8\x0fcfj\x1fU\xba', 0x3a, '\\xAK-^{', 0x3a, './file0'}, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fsopen(0x0, 0x1) fsmount(r8, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r0, r2, 0x16, 0x0, @val=@perf_event={0xfffffffffffffffe}}, 0x18) 17.839581918s ago: executing program 6 (id=378): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.949889464s ago: executing program 39 (id=364): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.935453625s ago: executing program 40 (id=360): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x4a, &(0x7f00000009c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x7, 0x0, 0x3}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000a40)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x18, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0xc2, 0xfffb, 0x0, 0xffd, {[@window={0x3, 0x3, 0xa5}]}}}}}}}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000000)={0x3, [0x0, 0x0, 0x0]}) write$binfmt_script(r0, &(0x7f0000000440), 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a300000000048000000030a01040000000000000000010000000900010073797a30000000000900030073797a31000000001400048008000140000000040800024000000064080007006e6174004c000000060a01040000000000000008010000000900010073797a30000000000900020073797a3100000000200004801c000180090001006d617371000000000c000280080001400000004214000000110001"], 0xdc}, 0x1, 0x0, 0x0, 0x4}, 0x8040) connect$inet6(r2, &(0x7f0000000e80)={0xa, 0x4e07, 0x3, @empty, 0x23}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000ec0)=[{{&(0x7f0000000f00)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r4, &(0x7f0000000280)={0x2, 0x2383, @loopback}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0xfffffffe, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xe, 0x6, &(0x7f0000000b80)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r5}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @call={0x85, 0x0, 0x0, 0x34}, @exit], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000c00)={@map=r5, r6, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000c40)={r5, &(0x7f0000000c80), &(0x7f0000000cc0)=@tcp=r4}, 0x20) write(r4, &(0x7f0000000d00)='h', 0x100000) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_kvm_setup_syzos_vm$x86(r8, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r9, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_create_vm={0x12d, 0x18, 0x1}], 0x48}) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x4) 9.354678865s ago: executing program 3 (id=379): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002900)=r1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x0, 0x0, 0x110, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe0}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e22, 0x3, @loopback={0x100000}, 0x6}, 0x1c) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000700)=@deltaction={0x14, 0x31, 0x800, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 9.230679337s ago: executing program 3 (id=381): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x8000002, 0x2004}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x22008041, &(0x7f00000000c0)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x20) sendto$inet6(r2, &(0x7f0000000100)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x406f413, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@updpolicy={0x13c, 0x19, 0x1, 0x4070bd2d, 0x25dfdbff, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in=@remote, 0x4e20, 0xb, 0xf7ff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x1000}, {0x1, 0x6, 0x80}, 0xfffffffc}, [@tmpl={0x84, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x4}, 0x5, 0x3c}, 0x0, @in6=@empty, 0x3502, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7ffc}, {{@in6=@remote, 0x0, 0x3c}, 0x2, @in6=@loopback, 0xfffffffd, 0x4, 0x3, 0x0, 0x800, 0x800}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40015}, 0x20000010) 8.950868936s ago: executing program 5 (id=380): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e0, 0x0, 0x278, 0x148, 0x1e0, 0x148, 0x348, 0x348, 0x348, 0x348, 0x348, 0x6, 0x0, {[{{@ip={@local, @rand_addr=0x64010102, 0x0, 0x0, 'geneve1\x00', 'veth0_to_team\x00', {0xff}}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x8001, @ipv4=@local, 0x4e23}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xb0}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x6]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xe, 0x810, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip6tnl0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./mnt\x00', 0x1ff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000009c0)=@filename='./dev/sda1\x00', &(0x7f0000000a00)='./mnt\x00', &(0x7f0000000a40)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000a80)='./mnt\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./mnt\x00', 0x0, 0x21) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) gettid() ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000000b00)=@v1={0x0, @aes128, 0x1, @desc1}) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x1fe) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xd2b) syz_open_dev$loop(&(0x7f0000000b40), 0x0, 0x2) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x2}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xf}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c010}, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0xca) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) splice(r6, 0x0, r5, 0x0, 0x9, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x41) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x8, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(0xffffffffffffffff, 0x40109441, &(0x7f00000001c0)={0x8, 0xa03956e9afac437a, 0xc3}) 8.845116456s ago: executing program 5 (id=382): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x19, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000240)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) sched_setscheduler(r4, 0x1, &(0x7f0000000400)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000480)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000500), 0x651, 0x0) recvmmsg(r5, &(0x7f0000000540), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x200000f, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000004000000000001b0000d0a8cdd74e1bb4426600feff200000950000000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0x93, &(0x7f0000000680)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x4c) mkdirat(0xffffffffffffff9c, 0x0, 0x184) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x5) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r7 = openat$binfmt_register(0xffffff9c, &(0x7f0000000580), 0x1, 0x0) write$binfmt_register(r7, &(0x7f00000005c0)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x1, 0x3a, '/_\x7f\xf0R\xf6\xedI\xf3\xf4\x12I\xb1\xeb\x0f\xa9\x13r\xbaS$\x81<\x1b3a\xf7\xb2\x93\x8bw0\xa2m\xb7n3\x80K\x11n`\x7fo\xdd#\x8f3\xdb\xb1\x10$%\x92j\xbf\x11\xf7{\x06z\x83M^\xfb\xa8\x00O\xa7\r8\xc0c\xb6x\xd1\xcaO\xb8\x0fcfj\x1fU\xba', 0x3a, '\\xAK-^{', 0x3a, './file0'}, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fsopen(0x0, 0x1) fsmount(r8, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r0, r2, 0x16, 0x0, @val=@perf_event={0xfffffffffffffffe}}, 0x18) 8.454203217s ago: executing program 41 (id=369): r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, 0x0) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f00000000c0)={0x4}) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000480)="788072136296febd0dc879f20bf0689f295d781c1953d9bf25c82517fd97bf71a624d9447472136ae9c312e7c7228e3edf53a158479eb47ade15c2e0c424258bcd12ab49c0f87afb3705487a5e9261340c80fd4fb9090ff56620c84280f1be86358a03fedc460a4d6400e74f55d9394fd63efbb645654ccf455de7078115938459dcf4608181125055805e5b81f49f34b53d0b82fbad330350b15453cb7668392a5298ee12475ba6cfaf39a1c982eee53cca588f", &(0x7f0000000540)=""/49, 0x4}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x10, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800"/18, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000007000095000000000000007617040007000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000bc0)='syzkaller\x00', 0x4, 0xd4, &(0x7f0000000c00)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, 0xfffffffffffffffc) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@newtaction={0x98, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x84, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x2, 0xf}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x9}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x30, 0x2, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) read$FUSE(0xffffffffffffffff, &(0x7f0000001b80)={0x2020}, 0x2020) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000001a00010027bd7000fbdbdf250a801000fe00ff0b0000000008001c00", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x2000c084}, 0x24044010) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) ioctl$XFS_IOC_FSGEOMETRY(0xffffffffffffffff, 0x8100587e, &(0x7f0000001040)) fstat(r0, &(0x7f0000003c00)) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000d40)='./trace\x00', &(0x7f0000000d80)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000dc0)='./trace/set_event\x00', 0x2, 0x0) write(r3, &(0x7f0000000e00)='!', 0x1) lstat(&(0x7f0000003d40)='./file0\x00', &(0x7f0000003d80)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x20a02, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000340)={'\x00', 0x2}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000852010"], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80), &(0x7f0000000ac0)}, 0x94) ioctl$TUNSETDEBUG(r4, 0x400454c9, 0xffffffffffffffff) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000e40)={0x0, 0x0}, 0x6) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000e80)=r5, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000ec0)={r6, 0x20, &(0x7f0000000f00)={&(0x7f0000000f40)=""/243, 0xfffffffffffffdb4, 0x0, 0x0}}, 0x10) 8.42005516s ago: executing program 3 (id=384): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x0, 0x0}, 0x6) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=r0, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r1, 0x20, &(0x7f0000000180)={&(0x7f00000001c0)=""/238, 0xffffffffffffff98, 0x0, 0x0}}, 0x1e) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r1, 0x20, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0xb9}}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x11, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000000000000850000006d00000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000700)='GPL\x00'}, 0x80) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000740)={r4}, 0x8) close(r5) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000780)={r4, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_usb_connect$midi(0x3, 0x54, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000300000040cd0c350040000102030109024200010118980409040000020103200407240301000008072401001007000724010100070009058e0b00020fd7020425010009050d030004000000"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) 6.860460429s ago: executing program 3 (id=385): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2204054, &(0x7f0000000a00), 0x1, 0x51d, &(0x7f00000004c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c0) openat$dir(0xffffffffffffff9c, 0x0, 0x2100, 0x108) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000dc0)={'team_slave_1\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="01000000040000000700000006"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xd, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000d80)={r2}, 0x4c) 5.987973668s ago: executing program 3 (id=386): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x8082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'nr0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r1) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="130f000000000000f6ff06"], 0x18}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x400) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(r4, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r5, &(0x7f00000002c0), 0x4000087, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x0, &(0x7f0000000340)}) llistxattr(0x0, 0x0, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000040000001e000000000085000000bb00000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x300, 0x18c, 0x203, 0x0, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000007c0)={'syz_tun\x00', 0x0}) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001880)=""/84, 0x54}], 0x1) 5.862873721s ago: executing program 42 (id=376): sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x404}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x2, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x4000, 0x29, 0xd, 0x29, 0x0, @local, @loopback}}}}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00'], 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x8d0) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1000040, &(0x7f0000000600)={[{@user_xattr}, {@sysvgroups}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5759}}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@mb_optimize_scan}, {@minixdf}]}, 0x1, 0x5a3, &(0x7f00000006c0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000c80)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.982080055s ago: executing program 0 (id=387): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000001, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8004, 0x6}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x310, 0x278, 0xb0, 0x148, 0x1e0, 0x278, 0x1e0, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x20008080, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000100)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x100, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@private2={0xfc, 0x2, '\x00', 0x6}, 0x4f, r2}) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000643000/0x4000)=nil, 0x4000, 0xd) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = open(0x0, 0x0, 0x0) flock(r3, 0x2) open(&(0x7f0000000000)='./file0\x00', 0x148502, 0x16) 2.636565371s ago: executing program 43 (id=378): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.631988511s ago: executing program 0 (id=387): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000001, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8004, 0x6}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x310, 0x278, 0xb0, 0x148, 0x1e0, 0x278, 0x1e0, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x20008080, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000100)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x100, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@private2={0xfc, 0x2, '\x00', 0x6}, 0x4f, r2}) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000643000/0x4000)=nil, 0x4000, 0xd) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = open(0x0, 0x0, 0x0) flock(r3, 0x2) open(&(0x7f0000000000)='./file0\x00', 0x148502, 0x16) 2.321893773s ago: executing program 9 (id=388): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000001, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8004, 0x6}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x310, 0x278, 0xb0, 0x148, 0x1e0, 0x278, 0x1e0, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x20008080, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000100)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x100, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private2={0xfc, 0x2, '\x00', 0x6}, 0x4f}) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000643000/0x4000)=nil, 0x4000, 0xd) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = open(0x0, 0x0, 0x0) flock(r3, 0x2) open(&(0x7f0000000000)='./file0\x00', 0x148502, 0x16) 2.145361211s ago: executing program 0 (id=387): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000001, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8004, 0x6}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x310, 0x278, 0xb0, 0x148, 0x1e0, 0x278, 0x1e0, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x20008080, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000100)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x100, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@private2={0xfc, 0x2, '\x00', 0x6}, 0x4f, r2}) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000643000/0x4000)=nil, 0x4000, 0xd) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = open(0x0, 0x0, 0x0) flock(r3, 0x2) open(&(0x7f0000000000)='./file0\x00', 0x148502, 0x16) 1.911145335s ago: executing program 2 (id=383): socket(0x10, 0x803, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x60, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000007380)=0x3, 0x4) sendto(r2, &(0x7f00000073c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000007400)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000007440)=""/23, 0x17}, 0x80009}], 0x16c, 0x10002, 0x0) r3 = dup(r1) syz_ublk_setup_queues(r3, r0, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x21, 0x4, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) 1.722382194s ago: executing program 9 (id=388): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000001, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8004, 0x6}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x310, 0x278, 0xb0, 0x148, 0x1e0, 0x278, 0x1e0, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x20008080, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000100)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x100, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private2={0xfc, 0x2, '\x00', 0x6}, 0x4f}) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000643000/0x4000)=nil, 0x4000, 0xd) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = open(0x0, 0x0, 0x0) flock(r3, 0x2) open(&(0x7f0000000000)='./file0\x00', 0x148502, 0x16) 1.711884995s ago: executing program 0 (id=387): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000001, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8004, 0x6}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x310, 0x278, 0xb0, 0x148, 0x1e0, 0x278, 0x1e0, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x20008080, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000100)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x100, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@private2={0xfc, 0x2, '\x00', 0x6}, 0x4f, r2}) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000643000/0x4000)=nil, 0x4000, 0xd) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = open(0x0, 0x0, 0x0) flock(r3, 0x2) open(&(0x7f0000000000)='./file0\x00', 0x148502, 0x16) 1.457147371s ago: executing program 2 (id=383): socket(0x10, 0x803, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x60, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000007380)=0x3, 0x4) sendto(r2, &(0x7f00000073c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000007400)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000007440)=""/23, 0x17}, 0x80009}], 0x16c, 0x10002, 0x0) r3 = dup(r1) syz_ublk_setup_queues(r3, r0, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x21, 0x4, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) 1.430782604s ago: executing program 9 (id=388): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000001, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8004, 0x6}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x310, 0x278, 0xb0, 0x148, 0x1e0, 0x278, 0x1e0, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x20008080, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000100)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x100, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private2={0xfc, 0x2, '\x00', 0x6}, 0x4f}) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000643000/0x4000)=nil, 0x4000, 0xd) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = open(0x0, 0x0, 0x0) flock(r3, 0x2) open(&(0x7f0000000000)='./file0\x00', 0x148502, 0x16) 1.218765905s ago: executing program 0 (id=387): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000001, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8004, 0x6}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x310, 0x278, 0xb0, 0x148, 0x1e0, 0x278, 0x1e0, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x20008080, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000100)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x100, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@private2={0xfc, 0x2, '\x00', 0x6}, 0x4f, r2}) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000643000/0x4000)=nil, 0x4000, 0xd) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = open(0x0, 0x0, 0x0) flock(r3, 0x2) open(&(0x7f0000000000)='./file0\x00', 0x148502, 0x16) 1.212593016s ago: executing program 2 (id=383): socket(0x10, 0x803, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x60, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000007380)=0x3, 0x4) sendto(r2, &(0x7f00000073c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000007400)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000007440)=""/23, 0x17}, 0x80009}], 0x16c, 0x10002, 0x0) r3 = dup(r1) syz_ublk_setup_queues(r3, r0, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x21, 0x4, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) 761.743962ms ago: executing program 9 (id=388): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000001, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8004, 0x6}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x310, 0x278, 0xb0, 0x148, 0x1e0, 0x278, 0x1e0, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x20008080, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000100)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x100, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private2={0xfc, 0x2, '\x00', 0x6}, 0x4f}) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000643000/0x4000)=nil, 0x4000, 0xd) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = open(0x0, 0x0, 0x0) flock(r3, 0x2) open(&(0x7f0000000000)='./file0\x00', 0x148502, 0x16) 574.348861ms ago: executing program 2 (id=383): socket(0x10, 0x803, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x60, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000007380)=0x3, 0x4) sendto(r2, &(0x7f00000073c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000007400)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000007440)=""/23, 0x17}, 0x80009}], 0x16c, 0x10002, 0x0) r3 = dup(r1) syz_ublk_setup_queues(r3, r0, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x21, 0x4, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) 438.426855ms ago: executing program 0 (id=387): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000001, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8004, 0x6}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x310, 0x278, 0xb0, 0x148, 0x1e0, 0x278, 0x1e0, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x20008080, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000100)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x100, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@private2={0xfc, 0x2, '\x00', 0x6}, 0x4f, r2}) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000643000/0x4000)=nil, 0x4000, 0xd) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = open(0x0, 0x0, 0x0) flock(r3, 0x2) open(&(0x7f0000000000)='./file0\x00', 0x148502, 0x16) 290.2578ms ago: executing program 2 (id=383): socket(0x10, 0x803, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x60, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000007380)=0x3, 0x4) sendto(r2, &(0x7f00000073c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000007400)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000007440)=""/23, 0x17}, 0x80009}], 0x16c, 0x10002, 0x0) r3 = dup(r1) syz_ublk_setup_queues(r3, r0, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x21, 0x4, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) 139.051126ms ago: executing program 9 (id=388): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000001, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8004, 0x6}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x310, 0x278, 0xb0, 0x148, 0x1e0, 0x278, 0x1e0, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x20008080, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000100)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x100, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private2={0xfc, 0x2, '\x00', 0x6}, 0x4f}) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000643000/0x4000)=nil, 0x4000, 0xd) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = open(0x0, 0x0, 0x0) flock(r3, 0x2) open(&(0x7f0000000000)='./file0\x00', 0x148502, 0x16) 0s ago: executing program 2 (id=383): socket(0x10, 0x803, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x60, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000007380)=0x3, 0x4) sendto(r2, &(0x7f00000073c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000007400)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000007440)=""/23, 0x17}, 0x80009}], 0x16c, 0x10002, 0x0) r3 = dup(r1) syz_ublk_setup_queues(r3, r0, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x21, 0x4, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): adm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 27.773202][ T28] audit: type=1400 audit(1793749485.859:142): avc: denied { map } for pid=354 comm="syz.2.11" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=16214 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 27.773341][ T28] audit: type=1400 audit(1793749485.859:143): avc: denied { read write } for pid=354 comm="syz.2.11" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=16214 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 27.839473][ T367] xt_TCPMSS: Only works on TCP SYN packets [ 28.020742][ T369] loop0: detected capacity change from 0 to 256 [ 28.056414][ T369] exfat: Deprecated parameter 'utf8' [ 28.064116][ T372] loop4: detected capacity change from 0 to 256 [ 28.070686][ T369] exfat: Deprecated parameter 'namecase' [ 28.087735][ T364] loop1: detected capacity change from 0 to 1024 [ 28.096512][ T372] FAT-fs (loop4): Directory bread(block 64) failed [ 28.105859][ T369] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 28.118829][ T372] FAT-fs (loop4): Directory bread(block 65) failed [ 28.126053][ T372] FAT-fs (loop4): Directory bread(block 66) failed [ 28.143135][ T372] FAT-fs (loop4): Directory bread(block 67) failed [ 28.154319][ T372] FAT-fs (loop4): Directory bread(block 68) failed [ 28.168450][ T372] FAT-fs (loop4): Directory bread(block 69) failed [ 28.178170][ T19] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 28.185642][ T372] FAT-fs (loop4): Directory bread(block 70) failed [ 28.185689][ T372] FAT-fs (loop4): Directory bread(block 71) failed [ 28.199875][ T364] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 28.218092][ T364] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.236873][ T372] FAT-fs (loop4): Directory bread(block 72) failed [ 28.253195][ T372] FAT-fs (loop4): Directory bread(block 73) failed [ 28.259835][ T364] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.12: bg 0: block 112: padding at end of block bitmap is not set [ 28.277766][ T364] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 67 with max blocks 1 with error 28 [ 28.290446][ T364] EXT4-fs (loop1): This should not happen!! Data will be lost [ 28.290446][ T364] [ 28.300192][ T364] EXT4-fs (loop1): Total free blocks count 0 [ 28.306576][ T370] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #15: comm syz.1.12: lblock 0 mapped to illegal pblock 0 (length 1) [ 28.319764][ T364] EXT4-fs (loop1): Free/Dirty block details [ 28.325744][ T364] EXT4-fs (loop1): free_blocks=0 [ 28.331413][ T364] EXT4-fs (loop1): dirty_blocks=16 [ 28.336637][ T364] EXT4-fs (loop1): Block reservation details [ 28.342761][ T364] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 28.356959][ T376] loop0: detected capacity change from 0 to 1024 [ 28.385380][ T376] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 28.388335][ T19] usb 4-1: Using ep0 maxpacket: 32 [ 28.394974][ T376] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.411016][ T28] audit: type=1400 audit(1793749486.499:144): avc: denied { connect } for pid=371 comm="syz.4.14" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 28.423187][ T376] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.15: bg 0: block 112: padding at end of block bitmap is not set [ 28.445703][ T376] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 67 with max blocks 1 with error 28 [ 28.458277][ T19] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 28.458862][ T376] EXT4-fs (loop0): This should not happen!! Data will be lost [ 28.458862][ T376] [ 28.476767][ T376] EXT4-fs (loop0): Total free blocks count 0 [ 28.482966][ T376] EXT4-fs (loop0): Free/Dirty block details [ 28.489228][ T376] EXT4-fs (loop0): free_blocks=0 [ 28.494201][ T376] EXT4-fs (loop0): dirty_blocks=16 [ 28.497045][ T19] usb 4-1: config 0 has no interface number 0 [ 28.501166][ T376] EXT4-fs (loop0): Block reservation details [ 28.511914][ T376] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 28.517971][ T28] audit: type=1400 audit(1793749486.499:145): avc: denied { setopt } for pid=371 comm="syz.4.14" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 28.538199][ T19] usb 4-1: config 0 interface 184 has no altsetting 0 [ 28.558794][ T19] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 28.569576][ T382] xt_hashlimit: max too large, truncated to 1048576 [ 28.579257][ T376] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: comm syz.0.15: lblock 0 mapped to illegal pblock 0 (length 1) [ 28.588631][ T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.600959][ T290] EXT4-fs (loop1): unmounting filesystem. [ 28.607071][ T376] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #15: comm syz.0.15: lblock 0 mapped to illegal pblock 0 (length 1) [ 28.634821][ T19] usb 4-1: Product: syz [ 28.645969][ T19] usb 4-1: Manufacturer: syz [ 28.656839][ T19] usb 4-1: SerialNumber: syz [ 28.682415][ T19] usb 4-1: config 0 descriptor?? [ 28.697966][ T19] smsc75xx v1.0.0 [ 28.748449][ T287] EXT4-fs (loop0): unmounting filesystem. [ 28.954369][ T388] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 28.963752][ T390] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 28.978279][ T388] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.988936][ T390] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.000975][ T388] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.18: bg 0: block 112: padding at end of block bitmap is not set [ 29.015516][ T388] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 67 with max blocks 1 with error 28 [ 29.041486][ T390] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.17: bg 0: block 112: padding at end of block bitmap is not set [ 29.043838][ T388] EXT4-fs (loop1): This should not happen!! Data will be lost [ 29.043838][ T388] [ 29.066904][ T388] EXT4-fs (loop1): Total free blocks count 0 [ 29.073279][ T388] EXT4-fs (loop1): Free/Dirty block details [ 29.079337][ T388] EXT4-fs (loop1): free_blocks=0 [ 29.084399][ T388] EXT4-fs (loop1): dirty_blocks=16 [ 29.090502][ T404] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #15: comm syz.1.18: lblock 0 mapped to illegal pblock 0 (length 1) [ 29.093005][ T388] EXT4-fs (loop1): Block reservation details [ 29.128190][ T388] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 29.132742][ T390] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 67 with max blocks 1 with error 28 [ 29.170024][ T390] EXT4-fs (loop0): This should not happen!! Data will be lost [ 29.170024][ T390] [ 29.196967][ T390] EXT4-fs (loop0): Total free blocks count 0 [ 29.212063][ T390] EXT4-fs (loop0): Free/Dirty block details [ 29.218060][ T390] EXT4-fs (loop0): free_blocks=0 [ 29.223930][ T390] EXT4-fs (loop0): dirty_blocks=16 [ 29.229552][ T410] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: comm syz.0.17: lblock 0 mapped to illegal pblock 0 (length 1) [ 29.243158][ T390] EXT4-fs (loop0): Block reservation details [ 29.249478][ T390] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 29.255999][ T410] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #15: comm syz.0.17: lblock 0 mapped to illegal pblock 0 (length 1) [ 29.277043][ T290] EXT4-fs (loop1): unmounting filesystem. [ 29.284735][ T409] EXT4-fs (loop2): Test dummy encryption mode enabled [ 29.306371][ T409] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #11: comm syz.2.21: casefold flag without casefold feature [ 29.312625][ T19] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 29.319992][ T409] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.21: couldn't read orphan inode 11 (err -117) [ 29.342317][ T409] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 29.355999][ T19] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 29.489744][ T287] EXT4-fs (loop0): unmounting filesystem. [ 29.565916][ T421] x_tables: unsorted underflow at hook 4 [ 31.280531][ T356] tipc: Failed to remove unknown binding: 66,0,0/0:3403208020/3403208021 [ 31.314310][ T356] tipc: Failed to remove unknown binding: 66,0,0/0:3403208020/3403208021 [ 31.411605][ T433] set_capacity_and_notify: 3 callbacks suppressed [ 31.411641][ T433] loop1: detected capacity change from 0 to 128 [ 31.430795][ T433] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 31.444965][ T433] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.481483][ T288] EXT4-fs (loop2): unmounting filesystem. [ 31.502050][ T290] EXT4-fs (loop1): unmounting filesystem. [ 31.571318][ T438] x_tables: unsorted underflow at hook 4 [ 31.643176][ T436] loop0: detected capacity change from 0 to 512 [ 31.650560][ T436] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 31.664096][ T436] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 31.680448][ T443] netlink: 52 bytes leftover after parsing attributes in process `syz.4.29'. [ 31.692373][ T436] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 31.700410][ T436] System zones: 1-12 [ 31.705232][ T436] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.25: bad orphan inode 131072 [ 31.715945][ T436] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 31.731065][ T443] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.738317][ T443] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.772343][ T446] netlink: 52 bytes leftover after parsing attributes in process `syz.4.29'. [ 31.786452][ T430] EXT4-fs (loop0): shut down requested (2) [ 32.032876][ T456] loop1: detected capacity change from 0 to 1024 [ 32.108459][ T457] SELinux: Context : is not valid (left unmapped). [ 32.156968][ T457] loop4: detected capacity change from 0 to 2048 [ 32.229102][ T457] loop4: p1 < > p4 [ 32.236189][ T457] loop4: p4 size 722688 extends beyond EOD, truncated [ 32.288057][ T456] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 32.579937][ T456] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 32.604658][ T287] EXT4-fs (loop0): unmounting filesystem. [ 33.168887][ T461] loop3: detected capacity change from 0 to 512 [ 33.177795][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 33.177809][ T28] audit: type=1400 audit(1793749491.259:190): avc: denied { create } for pid=455 comm="syz.1.32" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 33.227085][ T456] netlink: 16 bytes leftover after parsing attributes in process `syz.1.32'. [ 33.260719][ T461] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 33.298784][ T461] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 33.310786][ T19] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 33.322100][ T19] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 33.332399][ T19] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 33.334350][ T461] EXT4-fs (loop3): orphan cleanup on readonly fs [ 33.342036][ T19] smsc75xx: probe of 4-1:0.184 failed with error -71 [ 33.356366][ T19] usb 4-1: USB disconnect, device number 2 [ 33.364154][ T28] audit: type=1400 audit(1793749491.389:191): avc: denied { unlink } for pid=291 comm="syz-executor" name="rdma.current" dev="tmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 33.405863][ T290] EXT4-fs (loop1): unmounting filesystem. [ 33.421902][ T28] audit: type=1400 audit(1793749491.509:192): avc: denied { create } for pid=462 comm="syz.0.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 33.439806][ T461] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.34: bad orphan inode 15 [ 33.448540][ T28] audit: type=1400 audit(1793749491.509:193): avc: denied { write } for pid=462 comm="syz.0.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 33.502474][ T461] EXT4-fs (loop3): Remounting filesystem read-only [ 33.528327][ T461] ext4_test_bit(bit=14, block=18) = 1 [ 33.542888][ T461] is_bad_inode(inode)=0 [ 33.553063][ T474] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.560345][ T474] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.568756][ T461] NEXT_ORPHAN(inode)=1023 [ 33.573124][ T461] max_ino=32 [ 33.576343][ T461] i_nlink=0 [ 33.606200][ T461] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.34: bg 0: block 440: padding at end of block bitmap is not set [ 33.631166][ T461] EXT4-fs (loop3): Remounting filesystem read-only [ 33.651362][ T461] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 33.682509][ T461] EXT4-fs (loop3): Remounting filesystem read-only [ 33.700049][ T461] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 33.778156][ T292] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 33.787023][ T289] EXT4-fs (loop3): unmounting filesystem. [ 33.979319][ T292] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.998193][ T292] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.018321][ T292] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 34.028424][ T482] Zero length message leads to an empty skb [ 34.038491][ T292] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.310584][ T463] syz.0.33 (463) used greatest stack depth: 19688 bytes left [ 34.466840][ T471] loop2: detected capacity change from 0 to 512 [ 34.475418][ T471] EXT4-fs: Ignoring removed bh option [ 34.532363][ T471] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 34.708328][ T496] loop4: detected capacity change from 0 to 2048 [ 34.715941][ T28] audit: type=1400 audit(1793749492.729:194): avc: denied { associate } for pid=486 comm="syz.4.42" name="rdma.current" dev="tmpfs" ino=64 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=":" [ 34.750617][ T496] loop4: p1 < > p4 [ 34.757661][ T496] loop4: p4 size 722688 extends beyond EOD, truncated [ 34.924205][ T471] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.707986][ T485] loop0: detected capacity change from 0 to 256 [ 35.730992][ T28] audit: type=1400 audit(1793749493.819:195): avc: denied { ioctl } for pid=468 comm="syz.2.36" path="socket:[16729]" dev="sockfs" ino=16729 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 35.807970][ T292] hid-picolcd 0003:04D8:C002.0001: report_id 0 is invalid [ 35.840055][ T292] hid-picolcd 0003:04D8:C002.0001: item 0 1 1 8 parsing failed [ 35.863895][ T292] hid-picolcd 0003:04D8:C002.0001: device report parse failed [ 35.873185][ T485] FAT-fs (loop0): Directory bread(block 64) failed [ 35.879827][ T485] FAT-fs (loop0): Directory bread(block 65) failed [ 35.887565][ T485] FAT-fs (loop0): Directory bread(block 66) failed [ 35.898274][ T292] hid-picolcd: probe of 0003:04D8:C002.0001 failed with error -22 [ 35.930936][ T28] audit: type=1400 audit(1793749494.019:196): avc: denied { connect } for pid=499 comm="syz.4.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 35.942816][ T485] FAT-fs (loop0): Directory bread(block 67) failed [ 35.983416][ T28] audit: type=1400 audit(1793749494.049:197): avc: denied { read } for pid=499 comm="syz.4.44" path="socket:[17498]" dev="sockfs" ino=17498 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 36.006510][ T485] FAT-fs (loop0): Directory bread(block 68) failed [ 36.024559][ T292] usb 3-1: USB disconnect, device number 2 [ 36.059689][ T485] FAT-fs (loop0): Directory bread(block 69) failed [ 36.140436][ T485] FAT-fs (loop0): Directory bread(block 70) failed [ 36.147008][ T485] FAT-fs (loop0): Directory bread(block 71) failed [ 36.168375][ T485] FAT-fs (loop0): Directory bread(block 72) failed [ 36.174952][ T485] FAT-fs (loop0): Directory bread(block 73) failed [ 36.255827][ T28] audit: type=1400 audit(1793749494.339:198): avc: denied { write } for pid=484 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 36.303369][ T28] audit: type=1400 audit(1793749494.369:199): avc: denied { create } for pid=484 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 36.391882][ T524] loop3: detected capacity change from 0 to 1024 [ 36.417579][ T524] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 36.462486][ T524] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 36.528341][ T289] EXT4-fs (loop3): unmounting filesystem. [ 36.596509][ T288] EXT4-fs (loop2): unmounting filesystem. [ 36.685640][ T535] x_tables: unsorted underflow at hook 4 [ 36.873256][ T542] loop2: detected capacity change from 0 to 256 [ 36.944234][ T542] exfat: Deprecated parameter 'utf8' [ 36.968668][ T542] exfat: Deprecated parameter 'namecase' [ 36.986690][ T542] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 37.114881][ T557] loop1: detected capacity change from 0 to 1024 [ 37.149929][ T557] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 37.181983][ T312] kworker/u4:3: attempt to access beyond end of device [ 37.181983][ T312] loop0: rw=1, sector=1224, nr_sectors = 160 limit=256 [ 37.197950][ T557] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 37.212368][ T312] kworker/u4:3: attempt to access beyond end of device [ 37.212368][ T312] loop0: rw=1, sector=1416, nr_sectors = 352 limit=256 [ 37.235113][ T290] EXT4-fs (loop1): unmounting filesystem. [ 37.264915][ T312] kworker/u4:3: attempt to access beyond end of device [ 37.264915][ T312] loop0: rw=1, sector=1800, nr_sectors = 128 limit=256 [ 37.325276][ T312] kworker/u4:3: attempt to access beyond end of device [ 37.325276][ T312] loop0: rw=1, sector=1960, nr_sectors = 21036 limit=256 [ 37.446457][ T569] loop2: detected capacity change from 0 to 1024 [ 37.534884][ T569] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 37.595952][ T569] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.664555][ T569] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: comm syz.2.67: lblock 0 mapped to illegal pblock 0 (length 1) [ 37.743358][ T569] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 37.780803][ T569] EXT4-fs (loop2): This should not happen!! Data will be lost [ 37.780803][ T569] [ 37.790982][ T583] x_tables: unsorted underflow at hook 4 [ 37.874130][ T581] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: comm syz.2.67: lblock 0 mapped to illegal pblock 0 (length 1) [ 37.894217][ T587] loop4: detected capacity change from 0 to 256 [ 37.926357][ T585] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: comm syz.2.67: lblock 0 mapped to illegal pblock 0 (length 1) [ 37.934001][ T587] exfat: Deprecated parameter 'utf8' [ 37.965262][ T587] exfat: Deprecated parameter 'namecase' [ 37.973676][ T587] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 37.986015][ T19] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 38.008471][ T581] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: comm syz.2.67: lblock 0 mapped to illegal pblock 0 (length 1) [ 38.070471][ T585] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: comm syz.2.67: lblock 0 mapped to illegal pblock 0 (length 1) [ 38.118379][ T581] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: comm syz.2.67: lblock 0 mapped to illegal pblock 0 (length 1) [ 38.169273][ T19] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.218538][ T585] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: comm syz.2.67: lblock 0 mapped to illegal pblock 0 (length 1) [ 38.220730][ T597] loop4: detected capacity change from 0 to 1024 [ 38.238155][ T19] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.255439][ T19] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 38.271715][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.307567][ T597] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 38.368880][ T288] EXT4-fs (loop2): unmounting filesystem. [ 38.379145][ T597] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 38.456567][ T291] EXT4-fs (loop4): unmounting filesystem. [ 38.695365][ T608] loop2: detected capacity change from 0 to 256 [ 38.720445][ T621] loop4: detected capacity change from 0 to 256 [ 38.772836][ T580] loop0: detected capacity change from 0 to 512 [ 38.837350][ T622] loop1: detected capacity change from 0 to 2048 [ 38.909624][ T622] loop1: p1 < > p4 [ 38.922012][ T622] loop1: p4 size 722688 extends beyond EOD, truncated [ 39.010867][ T621] exfat: Deprecated parameter 'utf8' [ 39.180855][ T621] exfat: Deprecated parameter 'namecase' [ 39.289866][ T608] FAT-fs (loop2): Directory bread(block 64) failed [ 39.318822][ T580] EXT4-fs: Ignoring removed bh option [ 39.697189][ T621] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 39.718567][ T608] FAT-fs (loop2): Directory bread(block 65) failed [ 39.725174][ T608] FAT-fs (loop2): Directory bread(block 66) failed [ 39.855978][ T608] FAT-fs (loop2): Directory bread(block 67) failed [ 39.882237][ T580] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 39.915481][ T630] x_tables: unsorted underflow at hook 4 [ 39.967067][ T608] FAT-fs (loop2): Directory bread(block 68) failed [ 39.973745][ T608] FAT-fs (loop2): Directory bread(block 69) failed [ 39.980532][ T608] FAT-fs (loop2): Directory bread(block 70) failed [ 39.987709][ T608] FAT-fs (loop2): Directory bread(block 71) failed [ 39.993496][ T580] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.999661][ T608] FAT-fs (loop2): Directory bread(block 72) failed [ 40.011638][ T608] FAT-fs (loop2): Directory bread(block 73) failed [ 40.071359][ T19] hid-picolcd 0003:04D8:C002.0002: report_id 0 is invalid [ 40.092066][ T19] hid-picolcd 0003:04D8:C002.0002: item 0 1 1 8 parsing failed [ 40.121064][ T19] hid-picolcd 0003:04D8:C002.0002: device report parse failed [ 40.138176][ T19] hid-picolcd: probe of 0003:04D8:C002.0002 failed with error -22 [ 40.287424][ T24] usb 1-1: USB disconnect, device number 2 [ 40.699351][ T649] loop4: detected capacity change from 0 to 1024 [ 40.805429][ T649] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 40.823142][ T646] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 40.881215][ T646] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.931748][ T287] EXT4-fs (loop0): unmounting filesystem. [ 40.957697][ T646] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #15: comm syz.3.91: lblock 0 mapped to illegal pblock 0 (length 1) [ 40.979302][ T649] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 41.107131][ T646] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 41.133021][ T291] EXT4-fs (loop4): unmounting filesystem. [ 41.229631][ T646] EXT4-fs (loop3): This should not happen!! Data will be lost [ 41.229631][ T646] [ 41.279558][ T661] exfat: Deprecated parameter 'utf8' [ 41.298595][ T650] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #15: comm syz.3.91: lblock 0 mapped to illegal pblock 0 (length 1) [ 41.318294][ T661] exfat: Deprecated parameter 'namecase' [ 41.339682][ T661] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 41.378980][ T659] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #15: comm syz.3.91: lblock 0 mapped to illegal pblock 0 (length 1) [ 41.439065][ T659] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #15: comm syz.3.91: lblock 0 mapped to illegal pblock 0 (length 1) [ 41.506509][ T673] netlink: 52 bytes leftover after parsing attributes in process `syz.1.99'. [ 41.589225][ T671] netlink: 52 bytes leftover after parsing attributes in process `syz.1.99'. [ 41.601844][ T289] EXT4-fs (loop3): unmounting filesystem. [ 41.618939][ T676] x_tables: unsorted underflow at hook 4 [ 41.855022][ T688] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 42.081868][ T688] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 42.240033][ T290] EXT4-fs (loop1): unmounting filesystem. [ 42.452290][ T398] kworker/u4:7: attempt to access beyond end of device [ 42.452290][ T398] loop2: rw=1, sector=1224, nr_sectors = 160 limit=256 [ 42.518450][ T398] kworker/u4:7: attempt to access beyond end of device [ 42.518450][ T398] loop2: rw=1, sector=1416, nr_sectors = 352 limit=256 [ 42.541584][ T398] kworker/u4:7: attempt to access beyond end of device [ 42.541584][ T398] loop2: rw=1, sector=1800, nr_sectors = 128 limit=256 [ 42.556043][ T707] set_capacity_and_notify: 3 callbacks suppressed [ 42.556061][ T707] loop1: detected capacity change from 0 to 256 [ 42.639227][ T710] loop4: detected capacity change from 0 to 1024 [ 42.647821][ T398] kworker/u4:7: attempt to access beyond end of device [ 42.647821][ T398] loop2: rw=1, sector=1960, nr_sectors = 2192 limit=256 [ 42.659586][ T707] exfat: Deprecated parameter 'utf8' [ 42.668600][ T710] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 42.707733][ T707] exfat: Deprecated parameter 'namecase' [ 42.713355][ T398] kworker/u4:7: attempt to access beyond end of device [ 42.713355][ T398] loop2: rw=1, sector=4152, nr_sectors = 2048 limit=256 [ 42.717949][ T398] kworker/u4:7: attempt to access beyond end of device [ 42.717949][ T398] loop2: rw=1, sector=6200, nr_sectors = 2048 limit=256 [ 42.799911][ T398] kworker/u4:7: attempt to access beyond end of device [ 42.799911][ T398] loop2: rw=1, sector=8248, nr_sectors = 2048 limit=256 [ 42.808675][ T707] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 42.826096][ T710] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 42.861459][ T398] kworker/u4:7: attempt to access beyond end of device [ 42.861459][ T398] loop2: rw=1, sector=10296, nr_sectors = 7720 limit=256 [ 42.970063][ T710] netlink: 16 bytes leftover after parsing attributes in process `syz.4.114'. [ 43.084180][ T726] x_tables: unsorted underflow at hook 4 [ 43.092664][ T291] EXT4-fs (loop4): unmounting filesystem. [ 43.182382][ T735] loop2: detected capacity change from 0 to 1024 [ 43.231983][ T739] loop4: detected capacity change from 0 to 1024 [ 43.268993][ T735] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 43.277535][ T735] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.320542][ T739] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 43.370707][ T731] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: comm syz.2.113: lblock 0 mapped to illegal pblock 0 (length 1) [ 43.429091][ T731] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 43.451771][ T739] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 43.467909][ T731] EXT4-fs (loop2): This should not happen!! Data will be lost [ 43.467909][ T731] [ 43.565361][ T291] EXT4-fs (loop4): unmounting filesystem. [ 43.566039][ T288] EXT4-fs (loop2): unmounting filesystem. [ 43.731519][ T761] loop3: detected capacity change from 0 to 256 [ 43.769201][ T761] exfat: Deprecated parameter 'utf8' [ 43.784811][ T761] exfat: Deprecated parameter 'namecase' [ 43.854565][ T761] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 44.982837][ T776] loop2: detected capacity change from 0 to 2048 [ 45.089162][ T776] loop2: p1 < > p4 [ 45.096882][ T776] loop2: p4 size 722688 extends beyond EOD, truncated [ 45.572201][ T781] loop4: detected capacity change from 0 to 1024 [ 45.583752][ T781] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 45.653484][ T783] loop2: detected capacity change from 0 to 1024 [ 45.709203][ T786] x_tables: unsorted underflow at hook 4 [ 45.719759][ T783] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 45.741282][ T781] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 45.760121][ T783] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.792627][ T783] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: comm syz.2.139: lblock 0 mapped to illegal pblock 0 (length 1) [ 45.807062][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 45.807078][ T28] audit: type=1400 audit(1793749503.899:202): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 45.859498][ T291] EXT4-fs (loop4): unmounting filesystem. [ 45.868745][ T783] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 45.869296][ T798] loop1: detected capacity change from 0 to 512 [ 45.888512][ T783] EXT4-fs (loop2): This should not happen!! Data will be lost [ 45.888512][ T783] [ 45.965703][ T798] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 46.046300][ T288] EXT4-fs (loop2): unmounting filesystem. [ 46.059004][ T807] EXT4-fs error (device loop1): ext4_validate_block_bitmap:420: comm syz.1.142: bg 0: bad block bitmap checksum [ 46.078025][ T807] syz.1.142 (807) used greatest stack depth: 19584 bytes left [ 46.131603][ T290] EXT4-fs (loop1): unmounting filesystem. [ 46.319702][ T824] loop1: detected capacity change from 0 to 256 [ 46.341974][ T824] exfat: Deprecated parameter 'utf8' [ 46.421527][ T824] exfat: Deprecated parameter 'namecase' [ 46.454808][ T824] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 46.658986][ T837] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 46.703949][ T839] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 46.712643][ T839] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.724622][ T839] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #15: comm syz.3.155: lblock 0 mapped to illegal pblock 0 (length 1) [ 46.730854][ T837] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.757590][ T839] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 46.776965][ T839] EXT4-fs (loop3): This should not happen!! Data will be lost [ 46.776965][ T839] [ 46.797224][ T843] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 46.831411][ T837] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: comm syz.4.154: lblock 0 mapped to illegal pblock 0 (length 1) [ 46.880638][ T851] EXT4-fs error (device loop1): ext4_validate_block_bitmap:420: comm syz.1.157: bg 0: bad block bitmap checksum [ 46.938521][ T839] syz.3.155 (839) used greatest stack depth: 18056 bytes left [ 46.948890][ T837] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 46.969735][ T290] EXT4-fs error (device loop1): ext4_readdir:223: inode #11: comm syz-executor: path /40/file0/lost+found: directory fails checksum at offset 8192 [ 47.016211][ T837] EXT4-fs (loop4): This should not happen!! Data will be lost [ 47.016211][ T837] [ 47.039286][ T289] EXT4-fs (loop3): unmounting filesystem. [ 47.048732][ T852] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #15: comm syz.4.154: lblock 0 mapped to illegal pblock 0 (length 1) [ 47.050532][ T290] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 2: comm syz-executor: Directory block failed checksum [ 47.062321][ T28] audit: type=1400 audit(1793749505.139:203): avc: denied { rmdir } for pid=290 comm="syz-executor" name="lost+found" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.144247][ T853] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #15: comm syz.4.154: lblock 0 mapped to illegal pblock 0 (length 1) [ 47.168039][ T852] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #15: comm syz.4.154: lblock 0 mapped to illegal pblock 0 (length 1) [ 47.183413][ T290] EXT4-fs error (device loop1): ext4_readdir:223: inode #11: comm syz-executor: path /40/file0/lost+found: directory fails checksum at offset 8192 [ 47.208754][ T853] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #15: comm syz.4.154: lblock 0 mapped to illegal pblock 0 (length 1) [ 47.252634][ T852] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #15: comm syz.4.154: lblock 0 mapped to illegal pblock 0 (length 1) [ 47.268422][ T290] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 2: comm syz-executor: Directory block failed checksum [ 47.308410][ T853] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #15: comm syz.4.154: lblock 0 mapped to illegal pblock 0 (length 1) [ 47.322024][ T290] EXT4-fs error (device loop1): ext4_readdir:223: inode #11: comm syz-executor: path /40/file0/lost+found: directory fails checksum at offset 8192 [ 47.367678][ T852] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #15: comm syz.4.154: lblock 0 mapped to illegal pblock 0 (length 1) [ 47.381278][ T290] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 2: comm syz-executor: Directory block failed checksum [ 47.414603][ T853] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #15: comm syz.4.154: lblock 0 mapped to illegal pblock 0 (length 1) [ 47.497052][ T290] EXT4-fs error (device loop1): ext4_readdir:223: inode #11: comm syz-executor: path /40/file0/lost+found: directory fails checksum at offset 8192 [ 47.623107][ T290] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 2: comm syz-executor: Directory block failed checksum [ 47.646452][ T861] syz.3.162 (861) used greatest stack depth: 16264 bytes left [ 47.740682][ T290] EXT4-fs error (device loop1): ext4_readdir:223: inode #11: comm syz-executor: path /40/file0/lost+found: directory fails checksum at offset 8192 [ 47.915319][ T291] EXT4-fs (loop4): unmounting filesystem. [ 47.976994][ T883] set_capacity_and_notify: 3 callbacks suppressed [ 47.977014][ T883] loop4: detected capacity change from 0 to 1024 [ 47.991433][ T876] loop3: detected capacity change from 0 to 512 [ 48.129544][ T584] EXT4-fs (loop1): unmounting filesystem. [ 48.140271][ T883] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 48.172073][ T876] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 48.242200][ T897] loop2: detected capacity change from 0 to 256 [ 48.276317][ T291] EXT4-fs (loop4): unmounting filesystem. [ 48.298484][ T897] exfat: Deprecated parameter 'utf8' [ 48.343464][ T897] exfat: Unknown parameter '' [ 48.376950][ T900] EXT4-fs error (device loop3): ext4_validate_block_bitmap:420: comm syz.3.169: bg 0: bad block bitmap checksum [ 48.821147][ T43] device bridge_slave_1 left promiscuous mode [ 48.833781][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.841566][ T43] device bridge_slave_0 left promiscuous mode [ 48.847835][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.888272][ T43] device veth1_macvtap left promiscuous mode [ 48.904716][ T43] device veth0_vlan left promiscuous mode [ 49.175679][ T289] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path /38/file0/lost+found: directory fails checksum at offset 8192 [ 49.307357][ T289] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 2: comm syz-executor: Directory block failed checksum [ 49.366000][ T916] loop2: detected capacity change from 0 to 256 [ 49.388551][ T916] FAT-fs (loop2): Unrecognized mount option "veth0:" or missing value [ 49.419321][ T334] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 49.435078][ T289] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path /38/file0/lost+found: directory fails checksum at offset 8192 [ 49.452030][ T28] audit: type=1326 audit(1793749507.549:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=915 comm="syz.2.181" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd268d9fb19 code=0x77ff0000 [ 49.522215][ T927] loop4: detected capacity change from 0 to 1024 [ 49.567725][ T927] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 49.598461][ T289] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 2: comm syz-executor: Directory block failed checksum [ 49.678479][ T289] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path /38/file0/lost+found: directory fails checksum at offset 8192 [ 49.693906][ T289] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 2: comm syz-executor: Directory block failed checksum [ 49.707443][ T927] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 49.778479][ T289] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path /38/file0/lost+found: directory fails checksum at offset 8192 [ 49.816187][ T291] EXT4-fs (loop4): unmounting filesystem. [ 49.854058][ T937] loop4: detected capacity change from 0 to 512 [ 49.960484][ T937] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 49.975245][ T289] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 2: comm syz-executor: Directory block failed checksum [ 49.988604][ T289] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path /38/file0/lost+found: directory fails checksum at offset 8192 [ 50.179572][ T942] EXT4-fs error (device loop4): ext4_validate_block_bitmap:420: comm syz.4.187: bg 0: bad block bitmap checksum [ 50.198188][ T291] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /42/file0/lost+found: directory fails checksum at offset 8192 [ 50.352227][ T291] EXT4-fs error (device loop4): ext4_empty_dir:3166: inode #11: block 2: comm syz-executor: Directory block failed checksum [ 50.420553][ T291] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /42/file0/lost+found: directory fails checksum at offset 8192 [ 50.508415][ T291] EXT4-fs error (device loop4): ext4_empty_dir:3166: inode #11: block 2: comm syz-executor: Directory block failed checksum [ 50.569737][ T291] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /42/file0/lost+found: directory fails checksum at offset 8192 [ 50.658438][ T291] EXT4-fs error (device loop4): ext4_empty_dir:3166: inode #11: block 2: comm syz-executor: Directory block failed checksum [ 50.699070][ T28] audit: type=1400 audit(1793749508.789:205): avc: denied { mounton } for pid=947 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 50.738480][ T291] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /42/file0/lost+found: directory fails checksum at offset 8192 [ 50.768154][ T28] audit: type=1400 audit(1793749508.789:206): avc: denied { create } for pid=947 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 50.794064][ T291] EXT4-fs error (device loop4): ext4_empty_dir:3166: inode #11: block 2: comm syz-executor: Directory block failed checksum [ 50.828808][ T291] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /42/file0/lost+found: directory fails checksum at offset 8192 [ 50.887516][ T947] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.918305][ T947] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.925912][ T947] device bridge_slave_0 entered promiscuous mode [ 50.949697][ T947] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.956775][ T947] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.970781][ T727] EXT4-fs (loop3): unmounting filesystem. [ 51.018664][ T947] device bridge_slave_1 entered promiscuous mode [ 51.166600][ T291] EXT4-fs (loop4): unmounting filesystem. [ 51.272660][ T947] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.279772][ T947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.287083][ T947] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.294176][ T947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.399908][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.428216][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.438617][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.449876][ T962] loop0: detected capacity change from 0 to 1024 [ 51.468001][ T962] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 51.478644][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.510568][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.528401][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.535498][ T312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.548234][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.556509][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.559851][ T962] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 51.563701][ T312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.598239][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.611919][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.660728][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.685509][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.708986][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.740733][ T287] EXT4-fs (loop0): unmounting filesystem. [ 51.746764][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.766031][ T947] device veth0_vlan entered promiscuous mode [ 51.809883][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.839226][ T947] device veth1_macvtap entered promiscuous mode [ 51.874460][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.885134][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.922898][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.958960][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.978213][ T788] syz.3.140 (788) used greatest stack depth: 13704 bytes left [ 53.175136][ T973] loop5: detected capacity change from 0 to 512 [ 53.249563][ T398] device bridge_slave_1 left promiscuous mode [ 53.255749][ T398] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.270462][ T973] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 53.308792][ T398] device bridge_slave_0 left promiscuous mode [ 53.314972][ T398] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.388231][ T398] device veth1_macvtap left promiscuous mode [ 53.395462][ T947] EXT4-fs error (device loop5): ext4_readdir:223: inode #11: comm syz-executor: path /1/file0/lost+found: directory fails checksum at offset 8192 [ 53.428708][ T398] device veth0_vlan left promiscuous mode [ 53.478598][ T947] EXT4-fs error (device loop5): ext4_empty_dir:3166: inode #11: block 2: comm syz-executor: Directory block failed checksum [ 53.491701][ T977] EXT4-fs error (device loop5): ext4_validate_block_bitmap:420: comm syz.5.200: bg 0: bad block bitmap checksum [ 53.528557][ T947] EXT4-fs error (device loop5): ext4_readdir:223: inode #11: comm syz-executor: path /1/file0/lost+found: directory fails checksum at offset 8192 [ 53.618471][ T947] EXT4-fs error (device loop5): ext4_empty_dir:3166: inode #11: block 2: comm syz-executor: Directory block failed checksum [ 53.664688][ T947] EXT4-fs error (device loop5): ext4_readdir:223: inode #11: comm syz-executor: path /1/file0/lost+found: directory fails checksum at offset 8192 [ 53.709149][ T947] EXT4-fs error (device loop5): ext4_empty_dir:3166: inode #11: block 2: comm syz-executor: Directory block failed checksum [ 53.738517][ T947] EXT4-fs error (device loop5): ext4_readdir:223: inode #11: comm syz-executor: path /1/file0/lost+found: directory fails checksum at offset 8192 [ 53.759663][ T947] EXT4-fs error (device loop5): ext4_empty_dir:3166: inode #11: block 2: comm syz-executor: Directory block failed checksum [ 53.772966][ T947] EXT4-fs error (device loop5): ext4_readdir:223: inode #11: comm syz-executor: path /1/file0/lost+found: directory fails checksum at offset 8192 [ 53.927642][ T987] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.935087][ T987] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.942735][ T987] device bridge_slave_0 entered promiscuous mode [ 53.950353][ T987] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.957412][ T987] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.960608][ T947] EXT4-fs (loop5): unmounting filesystem. [ 53.965981][ T987] device bridge_slave_1 entered promiscuous mode [ 53.979108][ T28] audit: type=1400 audit(1793749512.069:207): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 54.030251][ T995] loop2: detected capacity change from 0 to 1024 [ 54.082334][ T995] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 54.270861][ T987] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.277964][ T987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.285296][ T987] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.292361][ T987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.315372][ T995] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 54.463122][ T288] EXT4-fs (loop2): unmounting filesystem. [ 55.179494][ T395] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.186881][ T395] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.238265][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.245925][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.253735][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.262557][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.279337][ T395] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.286428][ T395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.307898][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.316462][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.324749][ T395] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.331824][ T395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.339374][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.347588][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.355702][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.363882][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.379674][ T1000] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.387065][ T1000] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.394846][ T1000] device bridge_slave_0 entered promiscuous mode [ 55.403949][ T1000] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.411149][ T1000] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.418839][ T1000] device bridge_slave_1 entered promiscuous mode [ 55.452911][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.464187][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.558163][ T28] audit: type=1326 audit(1793749513.589:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1013 comm="syz.2.216" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd268d9fb19 code=0x0 [ 55.743111][ T1006] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.750375][ T1006] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.761144][ T1006] device bridge_slave_0 entered promiscuous mode [ 55.770790][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.778655][ T1006] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.789369][ T1006] device bridge_slave_1 entered promiscuous mode [ 56.492479][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.499701][ T1006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.507013][ T1006] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.514080][ T1006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.584432][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.591809][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.600140][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.608046][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.616831][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.624387][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.637971][ T987] device veth0_vlan entered promiscuous mode [ 56.697002][ T987] device veth1_macvtap entered promiscuous mode [ 56.711766][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.720629][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.729320][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.737069][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.745009][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.752887][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.761706][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.767811][ T1032] loop2: detected capacity change from 0 to 1024 [ 56.771137][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.778047][ T1032] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 56.783219][ T312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.802415][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.811446][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.820000][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.827065][ T312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.831184][ T1032] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 56.855895][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.860345][ T288] EXT4-fs (loop2): unmounting filesystem. [ 56.864826][ T292] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 56.871738][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.895061][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.904703][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.928085][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.936457][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.945456][ T1037] loop2: detected capacity change from 0 to 16 [ 56.955751][ T1037] erofs: (device loop2): erofs_superblock_csum_verify: invalid checksum 0x37c479b1, 0x7bbbea8c expected [ 56.967766][ T334] udevd[334]: incorrect erofs checksum on /dev/loop2 [ 56.984919][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.995029][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.010324][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.018899][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.033877][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.041871][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.052650][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.061780][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.071096][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.078190][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.093884][ T292] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 57.106327][ T28] audit: type=1400 audit(1793749515.189:209): avc: denied { mounton } for pid=987 comm="syz-executor" path="/root/syzkaller.kIvJrz/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 57.106917][ T1006] device veth0_vlan entered promiscuous mode [ 57.136177][ T292] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 57.149330][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.157278][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.161586][ T292] usb 1-1: config 1 interface 0 has no altsetting 0 [ 57.170654][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.181066][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.188148][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.193290][ T292] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 57.196521][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.204485][ T292] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.214458][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.220790][ T292] usb 1-1: Product: syz [ 57.233950][ T398] device bridge_slave_1 left promiscuous mode [ 57.240150][ T292] usb 1-1: Manufacturer: syz [ 57.244798][ T292] usb 1-1: SerialNumber: syz [ 57.249712][ T398] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.273424][ T1028] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 57.292376][ T398] device bridge_slave_0 left promiscuous mode [ 57.300369][ T1028] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 57.315736][ T398] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.328642][ T398] device bridge_slave_1 left promiscuous mode [ 57.335192][ T398] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.347779][ T398] device bridge_slave_0 left promiscuous mode [ 57.354625][ T398] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.370542][ T398] device veth1_macvtap left promiscuous mode [ 57.376891][ T398] device veth0_vlan left promiscuous mode [ 57.384569][ T398] device veth1_macvtap left promiscuous mode [ 57.391018][ T398] device veth0_vlan left promiscuous mode [ 57.738952][ T1028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.773674][ T1028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.118502][ T1006] device veth1_macvtap entered promiscuous mode [ 58.156708][ T1044] x_tables: unsorted underflow at hook 4 [ 58.296684][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.310390][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.324137][ T1051] loop2: detected capacity change from 0 to 512 [ 58.332381][ T292] rtl8150 1-1:1.0: couldn't reset the device [ 58.340961][ T292] rtl8150: probe of 1-1:1.0 failed with error -5 [ 58.348836][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.370767][ T292] usb 1-1: USB disconnect, device number 3 [ 58.387313][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.409537][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.418809][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.447593][ T1051] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 58.464741][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.476134][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.490514][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.509820][ T1058] EXT4-fs error (device loop2): ext4_validate_block_bitmap:420: comm syz.2.226: bg 0: bad block bitmap checksum [ 58.528668][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.537199][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.553614][ T288] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path /39/file0/lost+found: directory fails checksum at offset 8192 [ 58.572530][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.587172][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.599029][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.612385][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.621065][ T288] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 2: comm syz-executor: Directory block failed checksum [ 58.639699][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.649338][ T1000] device veth0_vlan entered promiscuous mode [ 58.659164][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.666930][ T288] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path /39/file0/lost+found: directory fails checksum at offset 8192 [ 58.682764][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.695866][ T1000] device veth1_macvtap entered promiscuous mode [ 58.703250][ T288] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 2: comm syz-executor: Directory block failed checksum [ 58.718602][ T288] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path /39/file0/lost+found: directory fails checksum at offset 8192 [ 58.726631][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.748414][ T288] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 2: comm syz-executor: Directory block failed checksum [ 58.752528][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.778483][ T288] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path /39/file0/lost+found: directory fails checksum at offset 8192 [ 58.790194][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.822344][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.831006][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.831459][ T288] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 2: comm syz-executor: Directory block failed checksum [ 58.842924][ T1063] loop0: detected capacity change from 0 to 1024 [ 58.860182][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.869774][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.885922][ T1063] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 58.906802][ T288] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path /39/file0/lost+found: directory fails checksum at offset 8192 [ 58.943823][ T1063] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 58.992989][ T287] EXT4-fs (loop0): unmounting filesystem. [ 59.020470][ T1073] fuse: Bad value for 'fd' [ 59.028501][ T28] audit: type=1400 audit(1793749517.109:210): avc: denied { mount } for pid=1072 comm="syz.8.233" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 59.095137][ T1080] x_tables: unsorted underflow at hook 4 [ 59.137868][ T28] audit: type=1400 audit(1793749517.219:211): avc: denied { read } for pid=1083 comm="syz.7.236" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 59.165640][ T288] EXT4-fs (loop2): unmounting filesystem. [ 59.177631][ T1084] binder: 1083:1084 unknown command 0 [ 59.208858][ T1084] binder: 1083:1084 ioctl c0306201 200000002080 returned -22 [ 59.219279][ T28] audit: type=1400 audit(1793749517.269:212): avc: denied { open } for pid=1083 comm="syz.7.236" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 59.268063][ T28] audit: type=1400 audit(1793749517.269:213): avc: denied { ioctl } for pid=1083 comm="syz.7.236" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x6207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 59.325932][ T28] audit: type=1400 audit(1793749517.269:214): avc: denied { set_context_mgr } for pid=1083 comm="syz.7.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 59.456942][ T1095] loop8: detected capacity change from 0 to 1024 [ 59.531834][ T1095] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 59.591457][ T28] audit: type=1400 audit(1793749517.679:215): avc: denied { bind } for pid=1101 comm="syz.7.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 59.623345][ T1102] FAULT_INJECTION: forcing a failure. [ 59.623345][ T1102] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 59.623778][ T1095] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 59.665079][ T1006] EXT4-fs (loop8): unmounting filesystem. [ 59.712092][ T399] device bridge_slave_1 left promiscuous mode [ 59.718725][ T1102] CPU: 1 PID: 1102 Comm: syz.7.244 Not tainted syzkaller #0 [ 59.726059][ T1102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 59.736161][ T1102] Call Trace: [ 59.739493][ T1102] [ 59.742440][ T1102] __dump_stack+0x21/0x24 [ 59.746815][ T1102] dump_stack_lvl+0x110/0x170 [ 59.751513][ T1102] ? __cfi_dump_stack_lvl+0x8/0x8 [ 59.756557][ T1102] ? flush_tlb_mm_range+0x390/0x470 [ 59.761860][ T1102] dump_stack+0x15/0x24 [ 59.766037][ T1102] should_fail_ex+0x3bf/0x510 [ 59.770731][ T1102] should_fail+0xb/0x10 [ 59.774908][ T1102] should_fail_usercopy+0x1a/0x20 [ 59.779952][ T1102] _copy_from_user+0x1e/0xc0 [ 59.784563][ T1102] get_itimerspec64+0xa7/0x310 [ 59.789343][ T1102] ? __cfi_get_itimerspec64+0x10/0x10 [ 59.794732][ T1102] __x64_sys_timer_settime+0x168/0x260 [ 59.800209][ T1102] ? __cfi___x64_sys_timer_settime+0x10/0x10 [ 59.806218][ T1102] ? xfd_validate_state+0x70/0x150 [ 59.811359][ T1102] ? __kasan_check_write+0x14/0x20 [ 59.816507][ T1102] ? fpregs_restore_userregs+0x128/0x260 [ 59.822165][ T1102] ? switch_fpu_return+0xe/0x10 [ 59.827045][ T1102] x64_sys_call+0x3c4/0x9a0 [ 59.831568][ T1102] do_syscall_64+0x4c/0xa0 [ 59.836023][ T1102] ? clear_bhb_loop+0x30/0x80 [ 59.840725][ T1102] ? clear_bhb_loop+0x30/0x80 [ 59.845455][ T1102] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 59.851394][ T1102] RIP: 0033:0x7f68ed39fb19 [ 59.855840][ T1102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.875475][ T1102] RSP: 002b:00007f68ee2d3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000df [ 59.883909][ T1102] RAX: ffffffffffffffda RBX: 00007f68ed625fa0 RCX: 00007f68ed39fb19 [ 59.891915][ T1102] RDX: 0000200000000a80 RSI: 0000000000000001 RDI: 0000000000000000 [ 59.899933][ T1102] RBP: 00007f68ed437b70 R08: 0000000000000000 R09: 0000000000000000 [ 59.907916][ T1102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.915901][ T1102] R13: 00007f68ed626038 R14: 00007f68ed625fa0 R15: 00007ffdd2106f78 [ 59.923897][ T1102] [ 59.938600][ T399] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.956419][ T399] device bridge_slave_0 left promiscuous mode [ 59.964288][ T399] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.979242][ T399] device veth1_macvtap left promiscuous mode [ 59.985281][ T1113] loop8: detected capacity change from 0 to 512 [ 59.989169][ T399] device veth0_vlan left promiscuous mode [ 60.026504][ T1113] ext4: Unknown parameter '.' [ 60.094619][ T1113] Illegal XDP return value 4294967274 on prog (id 5) dev N/A, expect packet loss! [ 60.131625][ T1121] FAULT_INJECTION: forcing a failure. [ 60.131625][ T1121] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.151703][ T1121] CPU: 1 PID: 1121 Comm: syz.7.249 Not tainted syzkaller #0 [ 60.159051][ T1121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 60.169136][ T1121] Call Trace: [ 60.172440][ T1121] [ 60.175399][ T1121] __dump_stack+0x21/0x24 [ 60.179760][ T1121] dump_stack_lvl+0x110/0x170 [ 60.184499][ T1121] ? __cfi_dump_stack_lvl+0x8/0x8 [ 60.189558][ T1121] ? _parse_integer+0x2a/0x40 [ 60.194274][ T1121] dump_stack+0x15/0x24 [ 60.198471][ T1121] should_fail_ex+0x3bf/0x510 [ 60.203179][ T1121] should_fail+0xb/0x10 [ 60.207387][ T1121] should_fail_usercopy+0x1a/0x20 [ 60.212440][ T1121] _copy_from_user+0x1e/0xc0 [ 60.217060][ T1121] ___sys_sendmsg+0x1c3/0x360 [ 60.221775][ T1121] ? __sys_sendmsg+0x290/0x290 [ 60.226572][ T1121] ? __kasan_check_write+0x14/0x20 [ 60.231714][ T1121] ? proc_fail_nth_write+0x180/0x200 [ 60.237214][ T1121] ? vfs_write+0xa51/0xd00 [ 60.241695][ T1121] ? __fdget+0x19c/0x220 [ 60.245972][ T1121] __x64_sys_sendmsg+0x20d/0x2e0 [ 60.250975][ T1121] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 60.256476][ T1121] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 60.262577][ T1121] x64_sys_call+0x171/0x9a0 [ 60.267123][ T1121] do_syscall_64+0x4c/0xa0 [ 60.271592][ T1121] ? clear_bhb_loop+0x30/0x80 [ 60.276293][ T1121] ? clear_bhb_loop+0x30/0x80 [ 60.280993][ T1121] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 60.286911][ T1121] RIP: 0033:0x7f68ed39fb19 [ 60.291340][ T1121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.310973][ T1121] RSP: 002b:00007f68ee2d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 60.319412][ T1121] RAX: ffffffffffffffda RBX: 00007f68ed625fa0 RCX: 00007f68ed39fb19 [ 60.327409][ T1121] RDX: 000000002c000010 RSI: 0000200000000740 RDI: 0000000000000005 [ 60.335393][ T1121] RBP: 00007f68ee2d3090 R08: 0000000000000000 R09: 0000000000000000 [ 60.343383][ T1121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.351372][ T1121] R13: 00007f68ed626038 R14: 00007f68ed625fa0 R15: 00007ffdd2106f78 [ 60.359365][ T1121] [ 60.412771][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.422094][ T1097] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.433080][ T1097] device bridge_slave_0 entered promiscuous mode [ 60.447102][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.457461][ T1097] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.468699][ T1097] device bridge_slave_1 entered promiscuous mode [ 60.500124][ T1128] x_tables: unsorted underflow at hook 4 [ 60.604600][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.611711][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.638190][ T435] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 60.678629][ T399] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.688657][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.696253][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.712382][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.728456][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.744918][ T399] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.752020][ T399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.765096][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.773716][ T399] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.780835][ T399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.797431][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.805879][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.825633][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.831789][ T435] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 60.845755][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.853070][ T435] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.862084][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.874217][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.888167][ T435] usb 7-1: Product: syz [ 60.888235][ T1097] device veth0_vlan entered promiscuous mode [ 60.892384][ T435] usb 7-1: Manufacturer: syz [ 60.913014][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.925614][ T1097] device veth1_macvtap entered promiscuous mode [ 60.928249][ T435] usb 7-1: SerialNumber: syz [ 60.947737][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.971451][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.018508][ T28] audit: type=1400 audit(1793749519.109:216): avc: denied { read write } for pid=1136 comm="syz.9.238" name="control" dev="devtmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 61.067438][ T28] audit: type=1400 audit(1793749519.129:217): avc: denied { open } for pid=1136 comm="syz.9.238" path="/dev/mapper/control" dev="devtmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 61.119284][ T1144] loop9: detected capacity change from 0 to 1024 [ 61.128401][ T28] audit: type=1400 audit(1793749519.129:218): avc: denied { ioctl } for pid=1136 comm="syz.9.238" path="/dev/mapper/control" dev="devtmpfs" ino=266 ioctlcmd=0xfd09 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 61.174259][ T1144] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 61.328634][ T1144] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 61.384597][ T1097] EXT4-fs (loop9): unmounting filesystem. [ 61.877592][ T1150] loop0: detected capacity change from 0 to 256 [ 62.878694][ T1167] netlink: 96 bytes leftover after parsing attributes in process `syz.7.259'. [ 62.966292][ T28] audit: type=1400 audit(1793749521.049:219): avc: denied { read write } for pid=1173 comm="syz.7.261" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 63.065240][ T1176] x_tables: unsorted underflow at hook 4 [ 63.115798][ T60] usb 7-1: USB disconnect, device number 2 [ 64.609581][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 64.609597][ T28] audit: type=1400 audit(1793749522.699:223): avc: denied { read } for pid=1189 comm="syz.9.265" path="socket:[21266]" dev="sockfs" ino=21266 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 64.705465][ T1196] loop7: detected capacity change from 0 to 1024 [ 64.759096][ T1196] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 65.007042][ T1211] overlayfs: missing 'workdir' [ 65.016366][ T28] audit: type=1400 audit(1793749523.099:224): avc: denied { map } for pid=1181 comm="syz.6.263" path="socket:[21761]" dev="sockfs" ino=21761 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 65.092226][ T28] audit: type=1400 audit(1793749523.099:225): avc: denied { read write accept } for pid=1181 comm="syz.6.263" path="socket:[21761]" dev="sockfs" ino=21761 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 65.219227][ T1196] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 65.309467][ T28] audit: type=1400 audit(1793749523.159:226): avc: denied { create } for pid=1207 comm="syz.0.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 65.368400][ T292] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 65.618204][ T292] usb 1-1: Using ep0 maxpacket: 16 [ 65.632284][ T292] usb 1-1: unable to get BOS descriptor or descriptor too short [ 65.805074][ T292] usb 1-1: config 3 interface 1 has no altsetting 0 [ 65.811844][ T28] audit: type=1400 audit(1793749523.169:227): avc: denied { bind } for pid=1207 comm="syz.0.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 65.861915][ T292] usb 1-1: New USB device found, idVendor=0009, idProduct=0000, bcdDevice= 0.00 [ 65.898378][ T292] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 65.927166][ T1000] EXT4-fs (loop7): unmounting filesystem. [ 66.006026][ T292] usb 1-1: SerialNumber: syz [ 66.331087][ T1229] FAULT_INJECTION: forcing a failure. [ 66.331087][ T1229] name failslab, interval 1, probability 0, space 0, times 1 [ 66.401714][ T1229] CPU: 0 PID: 1229 Comm: syz.9.275 Not tainted syzkaller #0 [ 66.409074][ T1229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 66.419163][ T1229] Call Trace: [ 66.422475][ T1229] [ 66.425433][ T1229] __dump_stack+0x21/0x24 [ 66.429835][ T1229] dump_stack_lvl+0x110/0x170 [ 66.434545][ T1229] ? __cfi_dump_stack_lvl+0x8/0x8 [ 66.439598][ T1229] ? __cfi_handle_mm_fault+0x10/0x10 [ 66.444915][ T1229] ? down_read_trylock+0x27f/0x660 [ 66.450069][ T1229] dump_stack+0x15/0x24 [ 66.454266][ T1229] should_fail_ex+0x3bf/0x510 [ 66.458981][ T1229] ? io_submit_one+0x133/0x1910 [ 66.463863][ T1229] __should_failslab+0xac/0xf0 [ 66.468649][ T1229] should_failslab+0x9/0x20 [ 66.473185][ T1229] kmem_cache_alloc+0x3b/0x320 [ 66.477994][ T1229] ? __kasan_check_write+0x14/0x20 [ 66.483118][ T1229] io_submit_one+0x133/0x1910 [ 66.487823][ T1229] ? irqentry_exit+0x37/0x40 [ 66.492434][ T1229] ? exc_page_fault+0x5e/0xb0 [ 66.497138][ T1229] ? lookup_ioctx+0x2b0/0x2b0 [ 66.501851][ T1229] ? asm_exc_page_fault+0x27/0x30 [ 66.506895][ T1229] ? __get_user_4+0x1c/0x30 [ 66.511426][ T1229] ? lookup_ioctx+0x1ab/0x2b0 [ 66.516136][ T1229] __se_sys_io_submit+0x17b/0x3e0 [ 66.521189][ T1229] ? __x64_sys_io_submit+0x90/0x90 [ 66.526327][ T1229] ? ksys_write+0x1fa/0x260 [ 66.530864][ T1229] ? __cfi_ksys_write+0x10/0x10 [ 66.535734][ T1229] ? debug_smp_processor_id+0x17/0x20 [ 66.541171][ T1229] __x64_sys_io_submit+0x7b/0x90 [ 66.546134][ T1229] x64_sys_call+0x81d/0x9a0 [ 66.550664][ T1229] do_syscall_64+0x4c/0xa0 [ 66.555360][ T1229] ? clear_bhb_loop+0x30/0x80 [ 66.560145][ T1229] ? clear_bhb_loop+0x30/0x80 [ 66.564856][ T1229] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 66.570764][ T1229] RIP: 0033:0x7fc06ab9fb19 [ 66.575197][ T1229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.594909][ T1229] RSP: 002b:00007fc06ba7d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 66.603433][ T1229] RAX: ffffffffffffffda RBX: 00007fc06ae25fa0 RCX: 00007fc06ab9fb19 [ 66.611505][ T1229] RDX: 0000200000000380 RSI: 0000000000000002 RDI: 00007fc06ba5c000 [ 66.619493][ T1229] RBP: 00007fc06ba7d090 R08: 0000000000000000 R09: 0000000000000000 [ 66.627499][ T1229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.635483][ T1229] R13: 00007fc06ae26038 R14: 00007fc06ae25fa0 R15: 00007ffca76bb8d8 [ 66.643483][ T1229] [ 66.684970][ T292] usb 1-1: selecting invalid altsetting 0 [ 66.693098][ T292] rndis_host: probe of 1-1:3.0 failed with error -22 [ 66.711251][ T292] usb 1-1: USB disconnect, device number 4 [ 66.918462][ T28] audit: type=1326 audit(1793749525.009:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1235 comm="syz.9.276" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc06ab9fb19 code=0x0 [ 67.184916][ T1240] x_tables: unsorted underflow at hook 4 [ 67.741001][ T28] audit: type=1400 audit(1793749525.829:229): avc: denied { create } for pid=1249 comm="syz.0.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 67.764174][ T1250] netlink: 32 bytes leftover after parsing attributes in process `syz.0.281'. [ 67.854786][ T28] audit: type=1400 audit(1793749525.939:230): avc: denied { watch } for pid=1249 comm="syz.0.281" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 67.906315][ T28] audit: type=1400 audit(1793749525.939:231): avc: denied { connect } for pid=1249 comm="syz.0.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 68.067670][ T28] audit: type=1400 audit(1793749526.149:232): avc: denied { read write } for pid=1256 comm="syz.7.283" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 68.113031][ T1262] loop0: detected capacity change from 0 to 512 [ 68.265446][ T1262] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 68.367363][ T1266] EXT4-fs error (device loop0): ext4_validate_block_bitmap:420: comm syz.0.284: bg 0: bad block bitmap checksum [ 68.422488][ T287] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path /60/file0/lost+found: directory fails checksum at offset 8192 [ 68.498522][ T287] EXT4-fs error (device loop0): ext4_empty_dir:3166: inode #11: block 2: comm syz-executor: Directory block failed checksum [ 68.582595][ T287] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path /60/file0/lost+found: directory fails checksum at offset 8192 [ 68.693649][ T287] EXT4-fs error (device loop0): ext4_empty_dir:3166: inode #11: block 2: comm syz-executor: Directory block failed checksum [ 68.801826][ T287] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path /60/file0/lost+found: directory fails checksum at offset 8192 [ 68.890114][ T287] EXT4-fs error (device loop0): ext4_empty_dir:3166: inode #11: block 2: comm syz-executor: Directory block failed checksum [ 69.409731][ T1272] binder: 1271:1272 ioctl c0306201 200000004200 returned -14 [ 69.449593][ T287] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path /60/file0/lost+found: directory fails checksum at offset 8192 [ 69.847143][ T287] EXT4-fs error (device loop0): ext4_empty_dir:3166: inode #11: block 2: comm syz-executor: Directory block failed checksum [ 69.892789][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 69.892806][ T28] audit: type=1326 audit(1793749527.979:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1276 comm="syz.7.290" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f68ed39fb19 code=0x0 [ 69.958418][ T1277] x_tables: unsorted underflow at hook 4 [ 69.976913][ T1281] capability: warning: `syz.9.291' uses 32-bit capabilities (legacy support in use) [ 69.978651][ T287] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path /60/file0/lost+found: directory fails checksum at offset 8192 [ 70.558171][ T28] audit: type=1326 audit(1793749528.559:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1288 comm="syz.9.293" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc06ab9fb19 code=0x0 [ 71.277311][ T1241] EXT4-fs (loop0): unmounting filesystem. [ 71.410908][ T1300] loop6: detected capacity change from 0 to 256 [ 71.559730][ T1300] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb9756464, utbl_chksum : 0xe619d30d) [ 71.704812][ T28] audit: type=1400 audit(1793749529.789:238): avc: denied { write } for pid=1299 comm="syz.6.296" name="/" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 71.758734][ T28] audit: type=1400 audit(1793749529.789:239): avc: denied { add_name } for pid=1299 comm="syz.6.296" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 71.800974][ T28] audit: type=1400 audit(1793749529.789:240): avc: denied { associate } for pid=1299 comm="syz.6.296" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 71.876470][ T28] audit: type=1400 audit(1793749529.789:241): avc: denied { read write open } for pid=1299 comm="syz.6.296" path="/9/file0/file1" dev="loop6" ino=1048716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 71.903798][ T1310] loop7: detected capacity change from 0 to 1024 [ 71.910980][ T1310] EXT4-fs: Ignoring removed oldalloc option [ 71.916955][ T1310] EXT4-fs: Ignoring removed oldalloc option [ 71.924804][ T1310] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 71.952678][ T1310] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 71.963418][ T1310] incfs: Backing dir is not set, filesystem can't be mounted. [ 71.970999][ T1310] incfs: mount failed -2 [ 71.986054][ T28] audit: type=1400 audit(1793749529.959:242): avc: denied { create } for pid=1297 comm="syz.7.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 72.104251][ T28] audit: type=1400 audit(1793749529.999:243): avc: denied { mounton } for pid=1297 comm="syz.7.295" path="/syzcgroup/unified/syz7/file1" dev="cgroup2" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 72.158153][ T28] audit: type=1400 audit(1793749530.049:244): avc: denied { mounton } for pid=1297 comm="syz.7.295" path="/syzcgroup/unified/syz7/file1/file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.319063][ T395] device bridge_slave_1 left promiscuous mode [ 72.328283][ T395] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.343665][ T395] device bridge_slave_0 left promiscuous mode [ 72.350095][ T395] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.378250][ T395] device veth1_macvtap left promiscuous mode [ 72.394108][ T395] device veth0_vlan left promiscuous mode [ 72.477685][ T1316] loop8: detected capacity change from 0 to 256 [ 72.581455][ T1316] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xb9756464, utbl_chksum : 0xe619d30d) [ 72.798841][ T1316] FAULT_INJECTION: forcing a failure. [ 72.798841][ T1316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.256059][ T1316] CPU: 1 PID: 1316 Comm: syz.8.300 Not tainted syzkaller #0 [ 73.263409][ T1316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 73.273499][ T1316] Call Trace: [ 73.276798][ T1316] [ 73.279754][ T1316] __dump_stack+0x21/0x24 [ 73.284113][ T1316] dump_stack_lvl+0x110/0x170 [ 73.288815][ T1316] ? __cfi_dump_stack_lvl+0x8/0x8 [ 73.293877][ T1316] dump_stack+0x15/0x24 [ 73.298056][ T1316] should_fail_ex+0x3bf/0x510 [ 73.302783][ T1316] should_fail+0xb/0x10 [ 73.306969][ T1316] should_fail_usercopy+0x1a/0x20 [ 73.312017][ T1316] _copy_to_user+0x1e/0x90 [ 73.316475][ T1316] simple_read_from_buffer+0xe9/0x160 [ 73.321989][ T1316] proc_fail_nth_read+0x1a6/0x220 [ 73.327043][ T1316] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 73.332641][ T1316] ? security_file_permission+0x94/0xb0 [ 73.338221][ T1316] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 73.343789][ T1316] vfs_read+0x286/0x930 [ 73.347968][ T1316] ? __cfi_vfs_read+0x10/0x10 [ 73.352676][ T1316] ? __kasan_check_write+0x14/0x20 [ 73.357817][ T1316] ? mutex_lock+0x93/0x1b0 [ 73.362259][ T1316] ? __cfi_mutex_lock+0x10/0x10 [ 73.367143][ T1316] ? __fdget_pos+0x2cd/0x380 [ 73.371757][ T1316] ? ksys_read+0x70/0x260 [ 73.376109][ T1316] ksys_read+0x14a/0x260 [ 73.380372][ T1316] ? __cfi_ksys_read+0x10/0x10 [ 73.385163][ T1316] ? fpregs_restore_userregs+0x128/0x260 [ 73.390822][ T1316] __x64_sys_read+0x7b/0x90 [ 73.395350][ T1316] x64_sys_call+0x2f/0x9a0 [ 73.399809][ T1316] do_syscall_64+0x4c/0xa0 [ 73.404258][ T1316] ? clear_bhb_loop+0x30/0x80 [ 73.408970][ T1316] ? clear_bhb_loop+0x30/0x80 [ 73.413687][ T1316] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 73.419610][ T1316] RIP: 0033:0x7f2fd116034e [ 73.424046][ T1316] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 73.443675][ T1316] RSP: 002b:00007f2fd202ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 73.452116][ T1316] RAX: ffffffffffffffda RBX: 00007f2fd20306c0 RCX: 00007f2fd116034e [ 73.460107][ T1316] RDX: 000000000000000f RSI: 00007f2fd20300a0 RDI: 0000000000000005 [ 73.468102][ T1316] RBP: 00007f2fd2030090 R08: 0000000000000000 R09: 0000000000000000 [ 73.476094][ T1316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.484081][ T1316] R13: 00007f2fd1426038 R14: 00007f2fd1425fa0 R15: 00007ffeffb45928 [ 73.492079][ T1316] [ 73.623572][ T1322] loop6: detected capacity change from 0 to 1024 [ 73.704709][ T1322] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 73.832870][ T1322] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 73.922329][ T987] EXT4-fs (loop6): unmounting filesystem. [ 73.949405][ T1328] loop8: detected capacity change from 0 to 1024 [ 73.969809][ T28] audit: type=1326 audit(1793749532.059:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1330 comm="syz.6.305" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb00419fb19 code=0x0 [ 74.008143][ T1328] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 74.016729][ T1328] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.032828][ T1333] loop9: detected capacity change from 0 to 1024 [ 74.050171][ T1328] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.304: bg 0: block 112: padding at end of block bitmap is not set [ 74.102197][ T1333] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 74.126866][ T1333] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.153156][ T1333] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.306: bg 0: block 112: padding at end of block bitmap is not set [ 74.156128][ T1328] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 67 with max blocks 1 with error 28 [ 74.180299][ T1333] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 67 with max blocks 1 with error 28 [ 74.203711][ T1333] EXT4-fs (loop9): This should not happen!! Data will be lost [ 74.203711][ T1333] [ 74.217921][ T1333] EXT4-fs (loop9): Total free blocks count 0 [ 74.238135][ T1333] EXT4-fs (loop9): Free/Dirty block details [ 74.244097][ T1333] EXT4-fs (loop9): free_blocks=0 [ 74.249208][ T1333] EXT4-fs (loop9): dirty_blocks=16 [ 74.254489][ T1333] EXT4-fs (loop9): Block reservation details [ 74.278136][ T1333] EXT4-fs (loop9): i_reserved_data_blocks=1 [ 74.328698][ T1328] EXT4-fs (loop8): This should not happen!! Data will be lost [ 74.328698][ T1328] [ 74.376105][ T1328] EXT4-fs (loop8): Total free blocks count 0 [ 74.407826][ T1328] EXT4-fs (loop8): Free/Dirty block details [ 74.414856][ T1097] EXT4-fs (loop9): unmounting filesystem. [ 74.447192][ T1344] loop9: detected capacity change from 0 to 512 [ 74.464716][ T1328] EXT4-fs (loop8): free_blocks=0 [ 74.496408][ T1344] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 74.509786][ T1328] EXT4-fs (loop8): dirty_blocks=16 [ 74.543230][ T1328] EXT4-fs (loop8): Block reservation details [ 74.557189][ T1097] EXT4-fs error (device loop9): ext4_readdir:223: inode #11: comm syz-executor: path /18/file0/lost+found: directory fails checksum at offset 8192 [ 74.586238][ T1097] EXT4-fs error (device loop9): ext4_empty_dir:3166: inode #11: block 2: comm syz-executor: Directory block failed checksum [ 74.600615][ T1328] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 74.622995][ T1346] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.646821][ T1349] EXT4-fs error (device loop9): ext4_validate_block_bitmap:420: comm syz.9.309: bg 0: bad block bitmap checksum [ 74.665833][ T1346] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.698637][ T1346] device bridge_slave_0 entered promiscuous mode [ 74.708901][ T1097] EXT4-fs error (device loop9): ext4_readdir:223: inode #11: comm syz-executor: path /18/file0/lost+found: directory fails checksum at offset 8192 [ 74.747137][ T1346] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.764144][ T1346] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.778505][ T1097] EXT4-fs error (device loop9): ext4_empty_dir:3166: inode #11: block 2: comm syz-executor: Directory block failed checksum [ 74.789675][ T1346] device bridge_slave_1 entered promiscuous mode [ 74.799008][ T1097] EXT4-fs error (device loop9): ext4_readdir:223: inode #11: comm syz-executor: path /18/file0/lost+found: directory fails checksum at offset 8192 [ 74.841310][ T1353] loop6: detected capacity change from 0 to 128 [ 74.849015][ T1097] EXT4-fs error (device loop9): ext4_empty_dir:3166: inode #11: block 2: comm syz-executor: Directory block failed checksum [ 74.851938][ T1006] EXT4-fs (loop8): unmounting filesystem. [ 74.868839][ T1097] EXT4-fs error (device loop9): ext4_readdir:223: inode #11: comm syz-executor: path /18/file0/lost+found: directory fails checksum at offset 8192 [ 74.904471][ T1097] EXT4-fs error (device loop9): ext4_empty_dir:3166: inode #11: block 2: comm syz-executor: Directory block failed checksum [ 74.918829][ T1353] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 74.938472][ T1097] EXT4-fs error (device loop9): ext4_readdir:223: inode #11: comm syz-executor: path /18/file0/lost+found: directory fails checksum at offset 8192 [ 74.978237][ T1353] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 75.054982][ T1346] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.062130][ T1346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.069495][ T1346] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.076586][ T1346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.420711][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.466137][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.578997][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.675099][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.834843][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.868240][ T1097] EXT4-fs (loop9): unmounting filesystem. [ 76.078545][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.118799][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.147319][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.188718][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.227605][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.345598][ T1346] device veth0_vlan entered promiscuous mode [ 76.358624][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.378339][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.406844][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.451053][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.498340][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.518437][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.541488][ T1346] device veth1_macvtap entered promiscuous mode [ 76.558433][ T1367] netlink: 96 bytes leftover after parsing attributes in process `syz.7.316'. [ 76.570029][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.588189][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.597177][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.635538][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.666369][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.700984][ T28] audit: type=1400 audit(1793749534.789:247): avc: denied { shutdown } for pid=1370 comm="syz.1.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 76.758337][ T28] audit: type=1400 audit(1793749534.789:246): avc: denied { connect } for pid=1370 comm="syz.1.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 76.819407][ T28] audit: type=1400 audit(1793749534.789:248): avc: denied { setopt } for pid=1370 comm="syz.1.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.027398][ T1385] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.036018][ T1385] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.047239][ T1385] device bridge_slave_0 entered promiscuous mode [ 77.071860][ T28] audit: type=1400 audit(1793749535.149:249): avc: denied { mounton } for pid=1389 comm="syz.7.321" path="/27/file0" dev="tmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 77.136779][ T28] audit: type=1326 audit(1793749535.189:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1387 comm="syz.1.320" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f04b019fb19 code=0x0 [ 77.235775][ T28] audit: type=1400 audit(1793749535.209:251): avc: denied { remount } for pid=1389 comm="syz.7.321" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 77.287274][ T1385] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.378554][ T1385] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.484298][ T1385] device bridge_slave_1 entered promiscuous mode [ 77.574587][ T395] device bridge_slave_1 left promiscuous mode [ 77.591726][ T395] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.885384][ T395] device bridge_slave_0 left promiscuous mode [ 77.988898][ T395] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.123099][ T395] device veth1_macvtap left promiscuous mode [ 78.204961][ T395] device veth0_vlan left promiscuous mode [ 78.388882][ T987] EXT4-fs (loop6): unmounting filesystem. [ 78.788322][ T60] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 78.861697][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.874668][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.927921][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.942500][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.964455][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.971585][ T312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.979135][ T60] usb 7-1: not running at top speed; connect to a high speed hub [ 78.998843][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.008415][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.027461][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.028730][ T60] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.034707][ T312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.068198][ T60] usb 7-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 79.085549][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.097755][ T60] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.104676][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.139124][ T60] usb 7-1: Found UVC 1.00 device (046d:0825) [ 79.147744][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.156425][ T60] usb 7-1: No streaming interface found for terminal 2. [ 79.164059][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.192254][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.218783][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.238332][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.255311][ T1385] device veth0_vlan entered promiscuous mode [ 79.274409][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.289743][ T1385] device veth1_macvtap entered promiscuous mode [ 79.307505][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.330050][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.383973][ T1428] tipc: Started in network mode [ 79.408337][ T1428] tipc: Node identity , cluster identity 4711 [ 79.414466][ T1428] tipc: Failed to obtain node identity [ 79.448486][ T1428] tipc: Enabling of bearer rejected, failed to enable media [ 79.637296][ T1444] netlink: 8964 bytes leftover after parsing attributes in process `syz.4.336'. [ 79.678205][ T1444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.336'. [ 79.702991][ T28] audit: type=1326 audit(1793749537.789:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1437 comm="syz.8.333" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2fd119fb19 code=0x0 [ 79.845679][ T1448] process 'syz.6.323' launched '/dev/fd/14' with NULL argv: empty string added [ 80.021236][ T1449] netlink: 4 bytes leftover after parsing attributes in process `syz.6.323'. [ 80.280709][ T28] audit: type=1400 audit(1793749538.359:253): avc: denied { execute } for pid=1401 comm="syz.6.323" dev="tmpfs" ino=1165 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 80.514765][ T1449] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.616623][ T28] audit: type=1400 audit(1793749538.389:254): avc: denied { execute_no_trans } for pid=1401 comm="syz.6.323" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1165 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 80.978220][ T1449] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.182522][ T1467] FAULT_INJECTION: forcing a failure. [ 81.182522][ T1467] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.226759][ T1467] CPU: 0 PID: 1467 Comm: syz.8.341 Not tainted syzkaller #0 [ 81.234113][ T1467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 81.244194][ T1467] Call Trace: [ 81.247491][ T1467] [ 81.250436][ T1467] __dump_stack+0x21/0x24 [ 81.254807][ T1467] dump_stack_lvl+0x110/0x170 [ 81.259494][ T1467] ? __cfi_dump_stack_lvl+0x8/0x8 [ 81.264539][ T1467] ? __cfi_avc_has_perm+0x10/0x10 [ 81.269581][ T1467] dump_stack+0x15/0x24 [ 81.273926][ T1467] should_fail_ex+0x3bf/0x510 [ 81.278619][ T1467] should_fail+0xb/0x10 [ 81.282819][ T1467] should_fail_usercopy+0x1a/0x20 [ 81.287874][ T1467] _copy_from_user+0x1e/0xc0 [ 81.292615][ T1467] xsk_setsockopt+0x29e/0x800 [ 81.297401][ T1467] ? __cfi_xsk_setsockopt+0x10/0x10 [ 81.302649][ T1467] ? __cfi_vfs_write+0x10/0x10 [ 81.307430][ T1467] ? security_socket_setsockopt+0x93/0xb0 [ 81.313168][ T1467] ? __cfi_xsk_setsockopt+0x10/0x10 [ 81.318400][ T1467] __sys_setsockopt+0x2ff/0x4e0 [ 81.323275][ T1467] ? __asan_report_store_n_noabort+0x20/0x20 [ 81.329272][ T1467] ? __cfi___sys_setsockopt+0x10/0x10 [ 81.334673][ T1467] ? ksys_write+0x1eb/0x260 [ 81.339218][ T1467] ? __cfi_ksys_write+0x10/0x10 [ 81.344085][ T1467] __x64_sys_setsockopt+0xbf/0xd0 [ 81.349132][ T1467] x64_sys_call+0x124/0x9a0 [ 81.353649][ T1467] do_syscall_64+0x4c/0xa0 [ 81.358074][ T1467] ? clear_bhb_loop+0x30/0x80 [ 81.362782][ T1467] ? clear_bhb_loop+0x30/0x80 [ 81.367563][ T1467] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 81.373473][ T1467] RIP: 0033:0x7f2fd119fb19 [ 81.377904][ T1467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.397525][ T1467] RSP: 002b:00007f2fd2030028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 81.405959][ T1467] RAX: ffffffffffffffda RBX: 00007f2fd1425fa0 RCX: 00007f2fd119fb19 [ 81.413948][ T1467] RDX: 0000000000000005 RSI: 000000000000011b RDI: 0000000000000004 [ 81.421934][ T1467] RBP: 00007f2fd2030090 R08: 0000000000000004 R09: 0000000000000000 [ 81.429929][ T1467] R10: 0000200000001780 R11: 0000000000000246 R12: 0000000000000001 [ 81.437913][ T1467] R13: 00007f2fd1426038 R14: 00007f2fd1425fa0 R15: 00007ffeffb45928 [ 81.445910][ T1467] [ 81.458455][ T60] usb 7-1: USB disconnect, device number 3 [ 81.507510][ T28] audit: type=1400 audit(1793749539.589:255): avc: denied { getopt } for pid=1468 comm="syz.4.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 81.720039][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 81.720055][ T28] audit: type=1400 audit(1793749539.809:265): avc: denied { ioctl } for pid=1478 comm="syz.8.345" path="socket:[22382]" dev="sockfs" ino=22382 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 81.775720][ T1483] x_tables: unsorted underflow at hook 4 [ 81.798320][ T1488] loop1: detected capacity change from 0 to 256 [ 81.905777][ T28] audit: type=1400 audit(1793749539.899:266): avc: denied { listen } for pid=1489 comm="syz.8.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 82.044931][ T1490] loop8: detected capacity change from 0 to 256 [ 82.087476][ T1488] FAT-fs (loop1): Unrecognized mount option "nonumtail=wy_<(]0" or missing value [ 82.174142][ T1490] exfat: Unknown parameter '00000000000000000004' [ 82.375297][ T28] audit: type=1326 audit(1793749539.959:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1476 comm="syz.7.346" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f68ed39fb19 code=0x0 [ 82.652461][ T1490] loop8: detected capacity change from 0 to 256 [ 82.753419][ T28] audit: type=1400 audit(1793749540.429:268): avc: denied { write } for pid=1489 comm="syz.8.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.118459][ T1296] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 83.154684][ T28] audit: type=1326 audit(1793749541.239:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1498 comm="syz.7.351" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f68ed39fb19 code=0x0 [ 83.378160][ T1296] usb 2-1: Using ep0 maxpacket: 32 [ 83.386958][ T1296] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 83.545382][ T1296] usb 2-1: config 0 has no interface number 0 [ 83.684368][ T1296] usb 2-1: config 0 interface 184 has no altsetting 0 [ 83.980145][ T1296] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 84.009556][ T1296] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.049913][ T1296] usb 2-1: Product: syz [ 84.056636][ T28] audit: type=1400 audit(1793749542.139:270): avc: denied { mounton } for pid=1512 comm="syz.6.354" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.088239][ T1513] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 84.115996][ T1296] usb 2-1: Manufacturer: syz [ 84.120935][ T1296] usb 2-1: SerialNumber: syz [ 84.129098][ T1514] fuse: Unknown parameter 'smackfsroot' [ 84.159112][ T1296] usb 2-1: config 0 descriptor?? [ 84.190083][ T1296] smsc75xx v1.0.0 [ 84.247766][ T1514] fuse: Unknown parameter 'smackfsroot' [ 84.253912][ T1514] fuse: Unknown parameter 'smackfsroot' [ 84.259854][ T1514] fuse: Unknown parameter 'smackfsroot' [ 84.265594][ T1514] fuse: Unknown parameter 'smackfsroot' [ 84.272804][ T1514] fuse: Unknown parameter 'smackfsroot' [ 84.278595][ T1514] fuse: Unknown parameter 'smackfsroot' [ 84.284337][ T1514] fuse: Unknown parameter 'smackfsroot' [ 84.290210][ T1514] fuse: Unknown parameter 'smackfsroot' [ 84.295963][ T1514] fuse: Unknown parameter 'smackfsroot' [ 84.301734][ T1514] fuse: Unknown parameter 'smackfsroot' [ 84.307456][ T1514] fuse: Unknown parameter 'smackfsroot' [ 84.328697][ T1514] fuse: Unknown parameter 'smackfsroot' [ 84.334456][ T1514] fuse: Unknown parameter 'smackfsroot' [ 84.438568][ T1514] fuse: Unknown parameter 'smackfsroot' [ 84.474056][ T1514] fuse: Unknown parameter 'smackfsroot' [ 84.485573][ T1514] fuse: Unknown parameter 'smackfsroot' [ 84.498286][ T1514] fuse: Unknown parameter 'smackfsroot' [ 84.514088][ T1514] fuse: Unknown parameter 'smackfsroot' [ 84.526488][ T1514] fuse: Unknown parameter 'smackfsroot' [ 84.538410][ T1514] fuse: Unknown parameter 'smackfsroot' [ 84.544612][ T1531] FAULT_INJECTION: forcing a failure. [ 84.544612][ T1531] name failslab, interval 1, probability 0, space 0, times 0 [ 84.549363][ T1514] fuse: Unknown parameter 'smackfsroot' [ 84.570886][ T1531] CPU: 1 PID: 1531 Comm: syz.8.358 Not tainted syzkaller #0 [ 84.577668][ T1514] fuse: Unknown parameter 'smackfsroot' [ 84.578233][ T1531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 84.578245][ T1531] Call Trace: [ 84.578251][ T1531] [ 84.578258][ T1531] __dump_stack+0x21/0x24 [ 84.578282][ T1531] dump_stack_lvl+0x110/0x170 [ 84.591816][ T1514] fuse: Unknown parameter 'smackfsroot' [ 84.593907][ T1531] ? __cfi_dump_stack_lvl+0x8/0x8 [ 84.604788][ T1514] fuse: Unknown parameter 'smackfsroot' [ 84.609172][ T1531] dump_stack+0x15/0x24 [ 84.609210][ T1531] should_fail_ex+0x3bf/0x510 [ 84.620937][ T1514] fuse: Unknown parameter 'smackfsroot' [ 84.625350][ T1531] ? getname_flags+0xba/0x510 [ 84.640896][ T1514] fuse: Unknown parameter 'smackfsroot' [ 84.644448][ T1531] __should_failslab+0xac/0xf0 [ 84.654823][ T1531] should_failslab+0x9/0x20 [ 84.659381][ T1531] kmem_cache_alloc+0x3b/0x320 [ 84.660848][ T1514] fuse: Unknown parameter 'smackfsroot' [ 84.664216][ T1531] getname_flags+0xba/0x510 [ 84.674293][ T1531] getname+0x19/0x20 [ 84.678226][ T1531] do_sys_openat2+0xeb/0x820 [ 84.680573][ T1514] fuse: Unknown parameter 'smackfsroot' [ 84.682860][ T1531] ? __kasan_check_write+0x14/0x20 [ 84.682887][ T1531] ? do_sys_open+0xe0/0xe0 [ 84.697964][ T1531] ? ksys_write+0x1fa/0x260 [ 84.699309][ T1514] fuse: Unknown parameter 'smackfsroot' [ 84.702510][ T1531] ? __cfi_ksys_write+0x10/0x10 [ 84.702537][ T1531] ? do_user_addr_fault+0x9a5/0x1030 [ 84.718387][ T1531] __x64_sys_openat+0x136/0x160 [ 84.718954][ T1514] fuse: Unknown parameter 'smackfsroot' [ 84.723284][ T1531] x64_sys_call+0x783/0x9a0 [ 84.723312][ T1531] do_syscall_64+0x4c/0xa0 [ 84.737821][ T1531] ? clear_bhb_loop+0x30/0x80 [ 84.741017][ T1514] fuse: Unknown parameter 'smackfsroot' [ 84.742537][ T1531] ? clear_bhb_loop+0x30/0x80 [ 84.752888][ T1531] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 84.756744][ T1514] fuse: Unknown parameter 'smackfsroot' [ 84.758824][ T1531] RIP: 0033:0x7f2fd116034e [ 84.758844][ T1531] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 84.758862][ T1531] RSP: 002b:00007f2fd200eec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 84.758884][ T1531] RAX: ffffffffffffffda RBX: 00007f2fd200f6c0 RCX: 00007f2fd116034e [ 84.805760][ T1531] RDX: 0000000000000002 RSI: 00007f2fd200ef90 RDI: ffffffffffffff9c [ 84.813768][ T1531] RBP: 00007f2fd200f090 R08: 0000000000000000 R09: 0000000000000000 [ 84.821774][ T1531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.829771][ T1531] R13: 00007f2fd1426128 R14: 00007f2fd1426090 R15: 00007ffeffb45928 [ 84.837781][ T1531] [ 84.848654][ T1296] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 84.869713][ T1296] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 85.131752][ T1536] xt_hashlimit: size too large, truncated to 1048576 [ 85.169850][ T1538] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=1538 comm=syz.4.361 [ 85.299745][ T28] audit: type=1400 audit(1793749543.389:271): avc: denied { unmount } for pid=1385 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 85.321198][ T1488] tipc: Failed to remove unknown binding: 66,0,0/0:2635783300/2635783301 [ 85.347923][ T1488] tipc: Failed to remove unknown binding: 66,0,0/0:2635783300/2635783301 [ 85.368309][ T1547] loop8: detected capacity change from 0 to 128 [ 85.401519][ T1547] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 85.442212][ T1547] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 85.497840][ T28] audit: type=1400 audit(1793749543.579:272): avc: denied { write } for pid=1546 comm="syz.8.365" name="encrypted_dir" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 85.510321][ T1547] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 85.548136][ T28] audit: type=1400 audit(1793749543.579:273): avc: denied { add_name } for pid=1546 comm="syz.8.365" name="file" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 85.581902][ T1547] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 85.634064][ T1006] EXT4-fs (loop8): unmounting filesystem. [ 85.888253][ T28] audit: type=1326 audit(1793749543.959:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1557 comm="syz.8.366" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2fd119fb19 code=0x0 [ 85.957705][ T1562] af_packet: tpacket_rcv: packet too big, clamped from 40 to 4294967272. macoff=96 [ 86.708224][ T1296] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 86.768594][ T1296] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 86.823564][ T28] audit: type=1400 audit(1793749544.909:275): avc: denied { ioctl } for pid=1566 comm="syz.1.369" path="socket:[23523]" dev="sockfs" ino=23523 ioctlcmd=0x7211 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.864196][ T1296] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 86.934477][ T1296] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 86.980797][ T28] audit: type=1400 audit(1793749545.009:276): avc: denied { write } for pid=1566 comm="syz.1.369" name="set_event" dev="tracefs" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 87.040094][ T1296] usb 2-1: USB disconnect, device number 2 [ 87.428139][ T24] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 87.618167][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 87.625276][ T24] usb 7-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 87.649702][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 1552, setting to 64 [ 87.671439][ T24] usb 7-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 87.694090][ T24] usb 7-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 87.716409][ T24] usb 7-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 87.735865][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.756072][ T24] usb 7-1: Product: 맲䙕৻ᵮ퐲䲱 [ 87.766184][ T24] usb 7-1: Manufacturer: Ь [ 87.776280][ T24] usb 7-1: SerialNumber: ࠓ [ 87.789644][ T1573] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 88.010627][ T28] audit: type=1400 audit(1793749546.099:277): avc: denied { map } for pid=1575 comm="syz.8.372" path="socket:[22520]" dev="sockfs" ino=22520 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 88.079667][ T1573] loop6: detected capacity change from 0 to 256 [ 88.103335][ T1577] loop8: detected capacity change from 0 to 256 [ 88.121624][ T24] usb 7-1: USB disconnect, device number 4 [ 88.157621][ T357] udevd[357]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 88.908176][ T1296] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 89.078174][ T1296] usb 7-1: device descriptor read/64, error -71 [ 89.348163][ T1296] usb 7-1: device descriptor read/64, error -71 [ 89.595311][ T1587] loop8: detected capacity change from 0 to 1024 [ 89.618171][ T1296] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 89.631795][ T1587] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 89.640710][ T1587] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.798148][ T1296] usb 7-1: device descriptor read/64, error -71 [ 90.068143][ T1296] usb 7-1: device descriptor read/64, error -71 [ 90.188209][ T1296] usb usb7-port1: attempt power cycle [ 90.598174][ T1296] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 90.629322][ T1296] usb 7-1: device descriptor read/8, error -71 [ 90.779404][ T1296] usb 7-1: device descriptor read/8, error -71 [ 91.048170][ T1296] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 91.079322][ T1296] usb 7-1: device descriptor read/8, error -71 [ 91.239373][ T1296] usb 7-1: device descriptor read/8, error -71 [ 91.358218][ T1296] usb usb7-port1: unable to enumerate USB device [ 91.698197][ T1550] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 100.677066][ T1601] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.693695][ T1601] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.701521][ T1601] device bridge_slave_0 entered promiscuous mode [ 100.708958][ T1601] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.716021][ T1601] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.723833][ T1601] device bridge_slave_1 entered promiscuous mode [ 100.798364][ T1601] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.805441][ T1601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.812766][ T1601] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.819828][ T1601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.874463][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.883476][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.893630][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.902947][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.911597][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 100.919586][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.940833][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 100.958436][ T1601] device veth0_vlan entered promiscuous mode [ 100.968488][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 100.976833][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 100.985172][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.003039][ T1601] device veth1_macvtap entered promiscuous mode [ 101.014950][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 101.024259][ T1605] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.031612][ T1605] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.039842][ T1605] device bridge_slave_0 entered promiscuous mode [ 101.052103][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 101.066495][ T1605] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.073950][ T1605] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.082046][ T1605] device bridge_slave_1 entered promiscuous mode [ 101.092369][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 101.137450][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 101.237195][ T1605] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.244444][ T1605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.251779][ T1605] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.258854][ T1605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.289349][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.297423][ T395] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.305211][ T395] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.321158][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 101.329835][ T395] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.336950][ T395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.345684][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 101.354688][ T395] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.361787][ T395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.377647][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 101.386722][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 101.406059][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 101.420072][ T1605] device veth0_vlan entered promiscuous mode [ 101.426570][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 101.435527][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.444069][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.459674][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 101.469694][ T1605] device veth1_macvtap entered promiscuous mode [ 101.481786][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 101.495529][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 101.527694][ T28] audit: type=1400 audit(1793749559.609:278): avc: denied { mount } for pid=1614 comm="syz.5.380" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 101.570056][ T1615] syz.5.380 (pid 1615) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 101.586746][ T28] audit: type=1400 audit(1793749559.669:279): avc: denied { unlink } for pid=1614 comm="syz.5.380" name="#1" dev="sda1" ino=2069 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=chr_file permissive=1 [ 102.409577][ T40] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 102.629514][ T40] usb 4-1: unable to get BOS descriptor or descriptor too short [ 102.637976][ T40] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.658143][ T40] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 102.693245][ T40] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0035, bcdDevice= 0.40 [ 102.702796][ T40] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.728267][ T40] usb 4-1: Product: syz [ 102.732515][ T40] usb 4-1: Manufacturer: syz [ 102.737139][ T40] usb 4-1: SerialNumber: syz [ 102.785381][ T103] udevd[103]: could not touch /run/udev/queue: No such file or directory [ 102.805690][ T28] audit: type=1400 audit(1793749560.889:280): avc: denied { setattr } for pid=1605 comm="syz-executor" path="/0/mnt/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 103.021252][ T103] udevd[103]: could not touch /run/udev/queue: No such file or directory [ 103.038620][ T40] usb 4-1: USB disconnect, device number 3 [ 103.048543][ T103] udevd[103]: could not touch /run/udev/queue: No such file or directory [ 103.057416][ T103] udevd[103]: could not touch /run/udev/queue: No such file or directory [ 103.278529][ T1616] udevd[1616]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 103.617911][ T1631] loop3: detected capacity change from 0 to 512 [ 103.654343][ T1631] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 103.698713][ T1631] EXT4-fs (loop3): warning: maximal mount count reached, running e2fsck is recommended [ 103.728924][ T1631] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.385: inode #15: comm syz.3.385: iget: illegal inode # [ 103.768650][ T1631] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.385: couldn't read orphan inode 15 (err -117) [ 103.808382][ T1631] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 103.832539][ T1631] EXT4-fs error (device loop3): ext4_lookup:1858: comm syz.3.385: inode #15: comm syz.3.385: iget: illegal inode # [ 103.939085][ T1601] EXT4-fs (loop3): unmounting filesystem. SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=2 req=383 state=3 status=67 (errno 32: Broken pipe) [ 110.471713][ T28] audit: type=1400 audit(1793749568.559:281): avc: denied { write } for pid=279 comm="syz-executor" path="pipe:[15402]" dev="pipefs" ino=15402 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1